Read the docs

Xavivars

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xavivars records in CISA KEV

No Xavivars vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xv Random Quotes 2 records MEDIUM

Records

2 records

TI-2024-12615 CVE-2024-13574 · GHSA-48fw-wg5j-xwvv

XV Random Quotes <= 1.40 - Reflected XSS

Priority MEDIUM 64

The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege us…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00273 Published 2025-03-11 No fix listed CWE-79
TI-2024-12621 CVE-2024-13580 · GHSA-xxrr-x8j4-g44v

XV Random Quotes <= 1.40 - Settings Reset via CSRF

Priority MEDIUM 53

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0017 Published 2025-03-11 No fix listed CWE-352
Open these records in search →