Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: TemplatesNext Clear all filters
TI-2024-23622 CVE-2024-35753 · GHSA-f8pm-jr2j-2vwf

WordPress TemplatesNext OnePager plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TemplatesNext TemplatesNext OnePager allows Stored XSS.This issue affects TemplatesNext OnePager: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-06-08 No fix listed CWE-79
TI-2023-00317 CVE-2023-0333 · GHSA-j67r-9w4c-jhx6

TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS

Priority MEDIUM 58

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0049 Published 2023-02-13 Fixed in 3.2.9
TI-2022-04276 CVE-2022-4678 · GHSA-mchv-7c6q-8f6p

TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0054 Published 2023-02-13 Fixed in 3.2.8