Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Cusmin Clear all filters
TI-2024-02715 CVE-2024-2907 · GHSA-5qhc-gc5j-pvp5

AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL

Priority MEDIUM 63

The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00548 Published 2024-04-25 Fixed in 7.2.2 CWE-79
TI-2021-07223 CVE-2021-24944 · GHSA-9fch-7g2x-c6hx

Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-01 Fixed in 7.0 CWE-79
TI-2021-14931 CVE-2021-36823 · GHSA-5qj7-xwrg-68v3

WordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Priority LOW 37

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cusmin AGCA - Absolutely Glamorous Custom Admin (WordPress plugin) allows Stored XSS.This issue affects AGCA - Absolut…

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00741 Published 2021-09-23 No fix listed CWE-79