Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Eralion Clear all filters
TI-2023-05353 CVE-2023-5817 · GHSA-px5m-m5m3-3f8x

Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Neon text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's neontext_box shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00626 Published 2023-10-27 No fix listed CWE-79
TI-2023-05311 CVE-2023-5774 · GHSA-4p44-g4xr-286m

Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Animated Counters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00581 Published 2023-10-27 No fix listed CWE-79