Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Quick-plugins Clear all filters
TI-2023-27734 CVE-2023-50829 · GHSA-7fwv-xqrr-668w

WordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aerin Loan Repayment Calculator and Application Form allows Stored XSS.This issue affects Loan Repayment Calculator an…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00335 Published 2023-12-21 No fix listed CWE-79
TI-2023-00350 CVE-2023-0366 · GHSA-8296-xh28-2r6c

Loan Comparison < 1.5.3 - Contributor+ Stored XSS via shortcode

Priority MEDIUM 58

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-02-21 Fixed in 1.5.3