Read the docs

Wp Athletics Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Athletics Project records in CISA KEV

No Wp Athletics Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Athletics 2 records LOW

Records

2 records

TI-2022-01639 CVE-2022-1773 · GHSA-7fvv-q5g2-4fx2

WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting

Priority LOW 29

The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-06-13 No fix listed CWE-79
TI-2022-01421 CVE-2022-1549 · GHSA-x9ch-v34x-c7q3

WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-06-13 No fix listed CWE-79
Open these records in search →