Read the docs

Wpamelia

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpamelia records in CISA KEV

No Wpamelia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amelia 1 record LOW

Records

1 record in Amelia · all components

TI-2022-00741 CVE-2022-0834 · GHSA-qcv2-jjq2-95wj

Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName

Priority LOW 38

The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00538 Published 2022-03-23 No fix listed CWE-79
Open these records in search →