Vendors / WaspThemes Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now WaspThemes records in CISA KEV No WaspThemes vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00349 · Published 2024-08-29 · No fix listed CWE-79
Priority MEDIUM 40
Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01008 · Published 2019-07-05 · No fix listed CWE-352
Priority LOW 22
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WaspThemes Visual CSS Style Editor plugin <= 7.5.8 versions.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00352 · Published 2023-05-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 1 0 0
