Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: nicdark Component: Cost Calculator Clear all filters
TI-2023-00159 CVE-2023-0165 · GHSA-g7xw-c5fw-fpv5

Cost Calculator <= 1.8 - Contributor+ Stored XSS

Priority MEDIUM 58

The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-03-06 No fix listed CWE-79
TI-2023-01093 CVE-2023-1155 · GHSA-62ff-83h9-g6px

Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00476 Published 2023-03-02 No fix listed CWE-79
TI-2021-07103 CVE-2021-24821 · GHSA-p6g4-5hgj-p576

Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price Settings (which gets i…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-03-07 Fixed in 1.6 CWE-79