Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mad Fish Digital Component: Bulk Noindex & Nofollow Toolkit Clear all filters
TI-2024-08169 CVE-2024-8803 · GHSA-j667-pfj5-g3cf

Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting

Priority LOW 27

The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-09-26 No fix listed CWE-79