Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: WPFactory Component: Back Button Widget Clear all filters
TI-2025-30578 CVE-2025-48252 · GHSA-hjrr-xg22-g28q

WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget back-button-widget allows Stored XSS.This issue affects Back Button Widget: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00271 Published 2025-05-19 No fix listed CWE-79