Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Hometory Clear all filters
TI-2024-14893 CVE-2024-22306 · GHSA-x9cm-jx7h-mxw7

WordPress Mang Board WP Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Board WP allows Stored XSS.This issue affects Mang Board WP: from n/a through 1.7.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-01-31 No fix listed CWE-79
TI-2021-08358 CVE-2021-26644 · GHSA-2m78-3m48-94h8

SQL injection in Hometory Mangboard WP BASIC

Priority MEDIUM 51

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00927 Published 2023-01-20 No fix listed CWE-89
TI-2021-08349 CVE-2021-26631 · GHSA-rrmq-wq3p-q78r

Mangboard parameter modulation vulnerability

Priority LOW 37

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01055 Published 2022-05-19 No fix listed CWE-20