Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: MonsterInsights Component: Userfeedback Clear all filters
TI-2024-05472 CVE-2024-5902 · GHSA-qcmf-37hx-74m3

UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter

Priority LOW 34

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00395 Published 2024-07-12 No fix listed CWE-79