Vendors / Tonjoostudio Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Tonjoostudio records in CISA KEV No Tonjoostudio vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00732 · Published 2019-09-17 · No fix listed CWE-352
Priority LOW 29
The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00956 · Published 2019-09-17 · No fix listed CWE-79
Priority LOW 25
The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00595 · Published 2018-01-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
