3 matches found
CVE-2023-48835
Car Rental Script v3.0 is vulnerable to CSV Injection via a Language Labels Export action...
8.8CVSS7.1AI score0.01201EPSS
SaveExploits2
CVE-2021-24899
The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtnl capability is disallowed...
4.8CVSS5.9AI score0.00598EPSS
SaveExploits2References2
Cross site scripting
The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtnl capability is disallowed...
3.5CVSS4.7AI score0.00598EPSS
SaveExploits2References1Affected Software1
20