CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2023/03/23 5:15 p.m.•5 views

CVE-2023-25456

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Klaviyo, Inc. Klaviyo plugin = 3.0.7 versions...

4.8CVSS6.5AI score0.00396EPSS

Exploits0References1

NVD•added 2023/03/23 5:15 p.m.•15 views

CVE-2023-25456

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Klaviyo, Inc. Klaviyo plugin = 3.0.7 versions...

5.9CVSS5.4AI score0.00396EPSS

Exploits0References1

CVE•added 2023/03/23 4:56 p.m.•55 views

CVE-2023-25456

CVE-2023-25456 (Klaviyo WordPress plugin) : Authenticated (admin+) Stored Cross-Site Scripting vulnerability affecting Klaviyo plugin versions

5.9CVSS5.1AI score0.00396EPSS

Exploits0References1Affected Software1

Patchstack•added 2023/03/13 12:0 a.m.•13 views

WordPress Klaviyo Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Klaviyo Type Plugin Vulnerable versions = 3.0.7 Fixed in 3.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25456 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f82861d87775 Credits Abdi Pranata Required privilege...

5.9CVSS5.7AI score0.00396EPSS

Exploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by