Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

TI-2023-01104 CVE-2023-1166 · GHSA-chj2-8247-g69q

USM Premium < 16.3 - Admin+ Stored XSS

Priority MEDIUM 55

The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00477 Published 2023-06-27 Fixed in 16.3