Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Sign-up Sheets 1.0.14 Clear all filters
TI-2021-06731 CVE-2021-24441 · GHSA-c5xg-pgx2-gmrf

Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

Priority LOW 37

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01308 Published 2021-07-12 Fixed in 1.0.14 CWE-1236
TI-2021-06730 CVE-2021-24440 · GHSA-q7cx-mv5x-6h53

Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 23

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-07-12 Fixed in 1.0.14 CWE-79