2 matches found
CVE-2019-17233: Improper Neutralization of Input During Web Page Generation
Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection...
6.1CVSS7.2AI score0.01843EPSS
SaveExploits1References2
CVE-2019-17232: Missing Authentication for Critical Function
Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import...
7.5CVSS7.7AI score0.03518EPSS
SaveExploits1References2
20