Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Pods – Custom Content Types and Fields 2.4.4.1*, 2.7.27 Clear all filters
TI-2021-06631 CVE-2021-24339 · GHSA-38hf-3vg9-9h45

Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 26

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Menu Label' field parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0076 Published 2021-06-21 Fixed in 2.7.27 CWE-79
TI-2021-06630 CVE-2021-24338 · GHSA-32xh-g4cw-vcw5

Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 26

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00792 Published 2021-06-21 Fixed in 2.7.27 CWE-79