Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Custom Field Suite ProjectCustom Field Suite*

4 matches found

CVE
CVE•added 2024/02/29 2:33 a.m.•91 views

CVE-2024-0689

CVE-2024-0689 involves the Custom Field Suite plugin for WordPress, where a Stored XSS exists in meta imports for all versions up to 2.6.4 due to insufficient input sanitization and output escaping. Affected: WordPress multisite installations and sites with unfiltered_html disabled. Impact: authe...

4.8CVSS4.9AI score0.00342EPSS
CVE
CVE•added 2019/05/10 2:58 a.m.•44 views

CVE-2019-11871

The CVE-2019-11871 entry concerns the WordPress plugin Custom Field Suite, affected in versions before 2.5.15. The vulnerability is an authenticated Cross-Site Scripting (XSS) flaw exploitable by editors or admins. The available connected documents confirm the affected component and scope but do ...

5.4CVSS5.3AI score0.00946EPSS
CVE
CVE•added 2023/05/18 9:55 a.m.•43 views

CVE-2023-32515

CVE-2023-32515 affects WordPress Custom Field Suite plugin, vulnerable in versions

5.9CVSS5.2AI score0.00396EPSS
CVE
CVE•added 2024/05/09 8:3 p.m.•32 views

CVE-2024-3068

CVE-2024-3068 : The WordPress plugin Custom Field Suite is vulnerable to Stored Cross-Site Scripting via the parameter cfs[fields][*][name] in all versions up to 2.6.5. The issue stems from insufficient input sanitization and output escaping, enabling an authenticated admin to inject scripts that...

4.8CVSS5.7AI score0.00557EPSS