Exactmetrics

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23880 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Exactmetrics

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-0082 MEDIUM POC This Month

The ExactMetrics WordPress plugin before 7.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Exactmetrics

NVD WPScan

CVSS 3.1

5.4

EPSS

0.6%

CVE-2023-23880

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Exactmetrics

NVD

CVE-2023-0082

EPSS 1% CVSS 5.4

MEDIUM POC This Month

WordPress XSS Exactmetrics

NVD WPScan