Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Ipanorama 360 Wordpress Virtual Tour Builder Project Clear all filters
TI-2023-04909 CVE-2023-5336 · GHSA-f35c-gw68-7hgr

iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode

Priority MEDIUM 41

The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.8.0 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00802 Published 2023-10-19 No fix listed CWE-89
TI-2022-04020 CVE-2022-4392 · GHSA-rx6f-437m-82px

iPanorama 360 WordPress Virtual Tour Builder <= 1.6.29 - Contributor+ Stored XSS

Priority MEDIUM 58

The iPanorama 360 WordPress Virtual Tour Builder plugin through 1.6.29 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-09 No fix listed