Web-Settler

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Web-Settler records in CISA KEV

No Web-Settler vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Layer Slider · all components

TI-2023-09485 CVE-2023-23671 · GHSA-7x6p-wq8h-xh5w

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00257 Published 2023-07-11 No fix listed CWE-352

TI-2023-09598 CVE-2023-23798 · GHSA-5mrm-2r76-2vqx

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0037 Published 2023-08-10 No fix listed CWE-79

TI-2023-25546 CVE-2023-47228 · GHSA-g896-hqwq-6qp3

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-11-08 No fix listed CWE-79