Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: StPeteDesign Component: Call Now Accessibility Button Clear all filters
TI-2023-02464 CVE-2023-2635 · GHSA-f5c3-v4p4-69h6

Call Now Accessibility Button < 1.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Call Now Accessibility Button WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00542 Published 2023-07-10 Fixed in 1.1
TI-2023-01905 CVE-2023-2028 · GHSA-g5f9-q7v3-ff2h

Call Now Accessibility Button < 1.1 - Admin+ Stored Cross Site Scripting

Priority LOW 23

The Call Now Accessibility Button WordPress plugin before 1.1 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unf…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00508 Published 2023-07-10 Fixed in 1.1