XYZScripts

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

XYZScripts records in CISA KEV

No XYZScripts vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Insert Php Code Snippet · all components

TI-2024-06876 CVE-2024-7420 · GHSA-jj8g-cqhp-wxj6

LOW 28

The Insert PHP Code Snippet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00247 Published 2024-08-15 No fix listed CWE-352