Read the docs

You-shang Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

You-shang Project records in CISA KEV

No You-shang Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
You-shang 1 record LOW

Records

1 record

TI-2021-06880 CVE-2021-24597 · GHSA-8wgc-q9r2-hg5h

You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting

Priority LOW 25

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-20 No fix listed CWE-79
Open these records in search →