Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: System Dashboard 2.8.15 Clear all filters
TI-2024-10291 CVE-2024-11107 · GHSA-9m9r-rw59-qh84

System Dashboard < 2.8.15 - Unauthenticated Stored XSS

Priority MEDIUM 60

The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00342 Published 2024-12-10 Fixed in 2.8.15 CWE-79
TI-2024-09923 CVE-2024-10708 · GHSA-j3vp-3p2j-8q53

System Dashboard < 2.8.15 - Admin+ Path Traversal

Priority MEDIUM 56

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the serve…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02041 Published 2024-12-10 Fixed in 2.8.15 CWE-22