ThemeNectar

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ThemeNectar records in CISA KEV

No ThemeNectar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Salient Core 2 records LOW

Records

2 records in Salient Core · all components

TI-2023-26578 CVE-2023-48748 · GHSA-vm68-58gf-qg82

WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79

TI-2023-26579 CVE-2023-48749 · GHSA-269c-5w5q-frxq

WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-11-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	6
Low	0
No CVSS	0