Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Stylishcostcalculator Component: Stylish Cost Calculator Clear all filters
TI-2023-00933 CVE-2023-0983 · GHSA-9hhj-3mgc-235q

Stylish Cost Calculator Premium < 7.9.0 - Unauthenticated Stored XSS

Priority MEDIUM 60

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-04-10 Fixed in 7.9.0
TI-2021-07104 CVE-2021-24822 · GHSA-wjf7-gjcp-9frw

Stylish Cost Calculator < 7.04 - Subscriber+ Unauthorised AJAX Calls to Stored XSS

Priority LOW 24

The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticated users), which could allow any authenticated users, such as…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00317 Published 2021-11-29 Fixed in 7.0.4 CWE-352