Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: emarket-design Component: Request A Quote Clear all filters
TI-2024-05779 CVE-2024-6231 · GHSA-8r7f-vjf7-pvp7

Request a Quote < 2.4.1 - Admin+ Stored XSS

Priority MEDIUM 60

The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2024-07-23 Fixed in 2.4.1 CWE-79
TI-2022-02068 CVE-2022-2240 · GHSA-c759-j56j-j6v3

Request a Quote <= 2.3.7 - CSV Injection

Priority MEDIUM 41

The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin downloa…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01426 Published 2022-07-25 No fix listed CWE-1236
TI-2022-02067 CVE-2022-2239 · GHSA-xrf7-mwrj-rgjc

Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capab…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00647 Published 2022-07-25 Fixed in 2.3.9
TI-2021-06776 CVE-2021-24489 · GHSA-gqjm-7fj6-9xvx

Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00643 Published 2021-10-25 Fixed in 2.3.9 CWE-79
TI-2021-06711 CVE-2021-24420 · GHSA-fj4v-mpc8-vg58

Request a Quote < 2.3.4 - Authenticated Stored XSS

Priority LOW 25

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the '…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-07-12 Fixed in 2.3.4 CWE-79