Json Content Importer

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-38723 MEDIUM This Month

Server-Side Request Forgery (SSRF) vulnerability in Bernhard Kux JSON Content Importer.5.6. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Json Content Importer

NVD

CVSS 3.1

6.4

EPSS

0.2%

CVE-2023-6268 MEDIUM POC This Month

The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Json Content Importer

NVD WPScan

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-25485 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Json Content Importer

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2024-38723

EPSS 0% CVSS 6.4

MEDIUM This Month

SSRF Json Content Importer

NVD

CVE-2023-6268

EPSS 0% CVSS 6.1

MEDIUM POC This Month

WordPress XSS Json Content Importer

NVD WPScan

CVE-2023-25485

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Json Content Importer

NVD