Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ActiveCampaign Component: Activecampaign Clear all filters
TI-2023-00223 CVE-2023-0233 · GHSA-rwf7-w5qg-cvrg

ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

Priority MEDIUM 58

The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor r…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00462 Published 2023-05-15 Fixed in 8.1.12
TI-2021-06425 CVE-2021-24133 · GHSA-6wf6-qg7h-hjm4

ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings

Priority LOW 21

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00474 Published 2021-03-18 Fixed in 8.0.2 CWE-352