Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Freshlight Lab Component: Menu Image, Icons Made Easy Clear all filters
TI-2023-27731 CVE-2023-50826 · GHSA-j28j-v2qr-58x6

WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00352 Published 2023-12-21 No fix listed CWE-79
TI-2022-00373 CVE-2022-0450 · GHSA-rwc4-w23c-gc77

Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-03-28 Fixed in 3.0.6 CWE-116