Keepinmind Dashboard Notes
Monthly
Stored cross-site scripting in the KeepInMind Dashboard Notes WordPress plugin (versions before 0.8.4.2) allows a high-privileged authenticated attacker to inject malicious script payloads into dashboard notes, which execute in the browsers of other users who view the affected notes. Reported by WPScan and corroborated by a publicly available exploit on Exploit-DB, the vulnerability carries a CVSS 3.1 score of 5.9 reflecting scope change (S:C) despite constrained prerequisites. No public exploit identified at time of analysis as active in-the-wild exploitation - EPSS stands at 0.03% (9th percentile), consistent with limited real-world targeting - and publicly available exploit code exists.
Stored cross-site scripting in the KeepInMind Dashboard Notes WordPress plugin (versions before 0.8.4.2) allows a high-privileged authenticated attacker to inject malicious script payloads into dashboard notes, which execute in the browsers of other users who view the affected notes. Reported by WPScan and corroborated by a publicly available exploit on Exploit-DB, the vulnerability carries a CVSS 3.1 score of 5.9 reflecting scope change (S:C) despite constrained prerequisites. No public exploit identified at time of analysis as active in-the-wild exploitation - EPSS stands at 0.03% (9th percentile), consistent with limited real-world targeting - and publicly available exploit code exists.