Read the docs

xplodedthemes

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

xplodedthemes records in CISA KEV

No xplodedthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpide 3 records LOW Wpide - File Manager & Code Editor 1 record LOW Xt Ajax Add To Cart For Woocommerce 1 record LOW Xt Floating Cart For Woocommerce 1 record LOW

Records

1 record in Xt Floating Cart For Woocommerce · all components

TI-2024-08519 CVE-2024-9178 · GHSA-r5vp-2jx8-jpmf

XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Priority LOW 28

The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-11-05 No fix listed CWE-79
Open these records in search →