Vendors / Thinkific Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Thinkific records in CISA KEV No Thinkific vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00524 · Published 2023-07-25 · No fix listed CWE-79
Priority LOW 23
The Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks against other administr…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00622 · Published 2022-08-08 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0