Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Vision Interactive Project Component: Vision Interactive Clear all filters
TI-2022-04019 CVE-2022-4391 · GHSA-vcgj-3gwq-4x48

Vision Interactive For WordPress <= 1.5.3 - Contributor+ Stored XSS

Priority MEDIUM 58

The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-09 No fix listed