Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: WP Darko Component: Top Bar Clear all filters
TI-2024-01543 CVE-2024-1660 · GHSA-hhr3-pmv2-95vx

Top Bar < 3.0.5 - Admin+ Stored XSS

Priority MEDIUM 55

The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00441 Published 2024-04-15 Fixed in 3.0.5 CWE-79
TI-2022-02431 CVE-2022-2629 · GHSA-q6g9-37mh-p56c

Top Bar < 3.0.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high privilege users such as admin to perform Stored Cross-Site Scri…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00644 Published 2022-10-10 Fixed in 3.0.4 CWE-79