webbistro

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

webbistro records in CISA KEV

No webbistro vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-02650 CVE-2024-2840 · GHSA-8g24-44j2-9cv2

Enhanced Media Library <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting

LOW 25

The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be upload…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2024-05-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0