Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: RealFaviconGenerator Clear all filters
TI-2022-00394 CVE-2022-0471 · GHSA-ccvf-jhvh-4w9p

Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting

Priority LOW 29

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00876 Published 2022-04-11 Fixed in 1.3.23 CWE-79
TI-2021-06727 CVE-2021-24437 · GHSA-cw69-2q7p-cmfx

Favicon by RealFaviconGenerator <= 1.3.20 - Reflected Cross-Site Scripting (XSS)

Priority LOW 29

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-08-30 No fix listed CWE-79