Read the docs

Wp-useronline Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp-useronline Project records in CISA KEV

No Wp-useronline Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Wp-useronline · all components

Priority MEDIUM 58

The WP-UserOnline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘templates[browsingpage][text]' parameter in versions up to, and including, 2.87.6 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01376 Published 2022-09-06 No fix listed CWE-79
Open these records in search →