Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wp Athletics Project Component: Wp Athletics Clear all filters
TI-2022-01639 CVE-2022-1773 · GHSA-7fvv-q5g2-4fx2

WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting

Priority LOW 29

The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-06-13 No fix listed CWE-79
TI-2022-01421 CVE-2022-1549 · GHSA-x9ch-v34x-c7q3

WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-06-13 No fix listed CWE-79