XYDAC

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

XYDAC records in CISA KEV

No XYDAC vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Ultimate Taxonomy Manager · all components

TI-2023-24596 CVE-2023-45836 · GHSA-qxr9-324x-2r4p

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00253 Published 2023-10-16 No fix listed CWE-352

TI-2023-24597 CVE-2023-45837 · GHSA-7gw9-pq5q-m8hr

LOW 32

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00527 Published 2023-10-24 No fix listed CWE-79