Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ninjateam Component: Header Footer Custom Code Clear all filters
TI-2024-06137 CVE-2024-6617 · GHSA-3xv2-v2hj-2crv

NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles

Priority MEDIUM 55

The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks e…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00362 Published 2024-09-13 Fixed in 1.2 CWE-79
TI-2024-06022 CVE-2024-6493 · GHSA-w8pf-f5g8-5xgv

NinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks e…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00339 Published 2024-09-13 Fixed in 1.2 CWE-79