Vulnerabilities

TI-2024-07998 CVE-2024-8622 · GHSA-v8h7-64rh-x555

amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery

LOW 27

The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_javascript' parameter in all versions up to, and including, 1.4.4 due to the ability to supply arbitrar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00384 Published 2024-09-12 No fix listed CWE-79

TI-2022-16742 CVE-2022-36405 · GHSA-6fjr-v73c-vqxr

WordPress amCharts: Charts and Maps plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 25

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in amCharts: Charts and Maps plugin <= 1.4 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00577 Published 2022-08-23 No fix listed CWE-79

TI-2012-01172 CVE-2012-1303 · GHSA-8jcw-vrmx-36jj

Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf; the message element…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00966 Published 2014-12-28 No fix listed CWE-79

Vulnerabilities

Filters

amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery

WordPress amCharts: Charts and Maps plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote…