Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WP Darko Component: Responsive Tabs Clear all filters
TI-2024-03816 CVE-2024-4096 · GHSA-4c34-f6qc-56qv

Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS

Priority MEDIUM 60

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attac…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0043 Published 2024-07-30 No fix listed CWE-79
TI-2024-01718 CVE-2024-1846 · GHSA-h9pr-qr4v-f87f

Responsive Tabs < 4.0.7 - Contributor+ Stored XSS

Priority LOW 25

The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00501 Published 2024-04-15 Fixed in 4.0.7 CWE-79