Read the docs

Zoho Campaigns

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Zoho Campaigns records in CISA KEV

No Zoho Campaigns vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-19985 CVE-2024-30239 · GHSA-xh7g-3rfm-j232

WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00517 Published 2024-03-28 No fix listed CWE-89
TI-2024-25986 CVE-2024-38752 · GHSA-9xjx-64hw-fp62

WordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho Campaigns allows Cross-Site Scripting (XSS).This issue affects Zoho Campaigns: from n/a through 2.0.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00275 Published 2024-08-13 No fix listed CWE-79
Open these records in search →