Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Loan Comparison 1.5.3 Clear all filters
TI-2023-00419 CVE-2023-0442 · GHSA-545v-3hf5-cppv

Loan Comparison < 1.5.2 - Reflected XSS via shortcode

Priority MEDIUM 60

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject ja…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-02-21 Fixed in 1.5.3
TI-2023-00350 CVE-2023-0366 · GHSA-8296-xh28-2r6c

Loan Comparison < 1.5.3 - Contributor+ Stored XSS via shortcode

Priority MEDIUM 58

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-02-21 Fixed in 1.5.3