Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: tagDiv Composer 4.2 Clear all filters
TI-2023-02970 CVE-2023-3170 · GHSA-7578-qrmf-q6j6

tagDiv Composer < 4.2 - Admin+ Stored XSS

Priority MEDIUM 55

The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some settings, which could allow users with Admin privileges to perform S…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0044 Published 2023-09-11 Fixed in 4.2 CWE-79
TI-2023-02969 CVE-2023-3169 · GHSA-84rx-q376-r85h

tagDiv Composer < 4.2 - Unauthenticated Stored XSS

Priority MEDIUM 60

The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not have authorisation in a REST route and does not validate as well as escape some parameters wh…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01217 Published 2023-09-11 Fixed in 4.2