Skip to main content

Checklist

3 CVEs product

Monthly

CVE-2024-50471 Oct 28, 13:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.0.10. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Trip Plan Wordpress Plugin Checklist
NVD VulDB
CVSS 3.1
6.5
EPSS
0.2%
CVE-2019-16525 Sep 19, 20:15 MEDIUM POC PATCH This Month

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP WordPress XSS Checklist
NVD
CVSS 3.1
6.1
EPSS
5.5%
CVE-2018-7318 Feb 22, 19:29 CRITICAL POC Act Now

SQL Injection exists in the CheckList 1.1.1 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Oracle Data Integrator Checklist
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
8.7%
EPSS 0% CVSS 6.5
MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.0.10. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Trip Plan +2
NVD VulDB
EPSS 6% CVSS 6.1
MEDIUM POC PATCH This Month

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP WordPress XSS +1
NVD
EPSS 9% CVSS 9.8
CRITICAL POC Act Now

SQL Injection exists in the CheckList 1.1.1 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Oracle Data Integrator +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy