Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: clevelandwebdeveloper Component: Spacer Clear all filters
TI-2022-03328 CVE-2022-3618 · GHSA-xvcr-mm2p-vgrf

Spacer < 3.0.7 - Admin+ Stored XSS

Priority MEDIUM 55

The Spacer WordPress plugin before 3.0.7 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00515 Published 2022-11-21 Fixed in 3.0.7