Read the docs

Thinktwit Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Thinktwit Project records in CISA KEV

No Thinktwit Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Thinktwit 1 record LOW

Records

1 record

TI-2021-06866 CVE-2021-24582 · GHSA-7xg4-c3g7-r42r

ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 25

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-20 Fixed in 1.7.1 CWE-79
Open these records in search →