Skip to main content

Clarity

3 CVEs product

Monthly

CVE-2024-0590 Feb 29, 01:43 MEDIUM PATCH This Month

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 24.8%.

WordPress CSRF Microsoft Clarity
NVD
CVSS 3.1
6.1
EPSS
24.8%
CVE-2023-37790 Nov 09, 00:15 MEDIUM POC This Month

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Broadcom File Upload Clarity
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-33850 Nov 19, 16:15 MEDIUM POC This Month

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Microsoft Clarity
NVD
CVSS 3.1
5.4
EPSS
1.5%
EPSS 25% CVSS 6.1
MEDIUM PATCH This Month

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 24.8%.

WordPress CSRF Microsoft +1
NVD
EPSS 0% CVSS 5.4
MEDIUM POC This Month

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Broadcom File Upload +1
NVD
EPSS 2% CVSS 5.4
MEDIUM POC This Month

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Microsoft Clarity
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy