Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: J-breuer Component: Frontend Checklist Clear all filters
TI-2024-04607 CVE-2024-4959 · GHSA-c2f6-2qgv-549c

Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items

Priority MEDIUM 55

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0033 Published 2024-06-26 No fix listed CWE-79
TI-2024-04605 CVE-2024-4957 · GHSA-x7qh-ghv7-7g8x

Frontend Checklist <= 2.3.2 - Admin+ Stored XSS

Priority MEDIUM 53

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00329 Published 2024-06-26 No fix listed CWE-79