Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Klaviyo, Inc. Component: Klavio Clear all filters
TI-2023-00829 CVE-2023-0874 · GHSA-6rcr-6w3p-5xj6

Klaviyo <= 3.0.10 - Admin+ Stored XSS

Priority MEDIUM 55

The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-04-10 Fixed in 3.0.10