Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Artprojectgroup Component: Custom Base Terms Clear all filters
TI-2023-02430 CVE-2023-2600 · GHSA-39h5-qh47-7qp5

Custom Base Terms < 1.0.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Custom Base Terms WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unf…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0047 Published 2023-06-19 Fixed in 1.0.3