Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wp-master Component: Logo Manager For Enamad Clear all filters
TI-2024-04800 CVE-2024-5170 · GHSA-f3pj-vwf5-5vr3

Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget

Priority MEDIUM 59

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh…

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00334 Published 2024-09-17 No fix listed CWE-79
TI-2024-04430 CVE-2024-4757 · GHSA-252v-9w3r-w4vm

Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF

Priority HIGH 70

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payl…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00521 Published 2024-06-25 No fix listed CWE-352