Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: PeepSo Component: Peepso Clear all filters
TI-2024-07062 CVE-2024-7618 · GHSA-245x-752w-r292

Cross-site scripting in PeepSo Community by PeepSo – Download from PeepSo.com

Priority LOW 22

The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 6.4.5.…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00336 Published 2024-09-10 No fix listed CWE-79
TI-2024-07094 CVE-2024-7655 · GHSA-rcj3-r74w-96hp

Cross-site scripting in PeepSo Community by PeepSo – Download from PeepSo.com

Priority LOW 22

The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.4.5.0 due to insufficient input…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00336 Published 2024-09-10 No fix listed CWE-79
TI-2024-14759 CVE-2024-22158 · GHSA-hc6c-m8v3-634f

WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affe…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-01-31 Fixed in 6.3.1.0 CWE-79
TI-2023-06513 CVE-2023-7125 · GHSA-37m7-jq3g-46vx

Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF

Priority LOW 20

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on their wall in their profile page), which could allow attackers to make logged in users perform such a…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00237 Published 2024-01-16 Fixed in 6.3.1.2 CWE-352
TI-2024-00169 CVE-2024-0187 · GHSA-9m8r-h264-rvx5

Community by PeepSo < 6.3.1.2 - Reflected XSS

Priority MEDIUM 60

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00515 Published 2024-01-16 Fixed in 6.3.1.2 CWE-79
TI-2023-26576 CVE-2023-48746 · GHSA-jmgq-6phq-mqvq

WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Reflected XSS.This issue a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79
TI-2023-25958 CVE-2023-47850 · GHSA-hj9p-mf5m-mqp9

WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affe…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-11-30 No fix listed CWE-79