Knowledge Base
Monthly
Missing authorization in the WebberZone Knowledge Base plugin for WordPress (versions through 3.2.0) allows unauthenticated remote attackers to reach knowledge base content that the plugin's access-control settings were intended to restrict. Because the CVSS vector is PR:N/UI:N, no account or victim interaction is needed; the exposure is limited to confidentiality (C:L, CVSS 5.3), with no write or availability impact. No public exploit code has been identified at time of analysis, and there is no confirmed CISA KEV entry, so real-world exploitation is not established from the available data.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.2.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Missing authorization in the WebberZone Knowledge Base plugin for WordPress (versions through 3.2.0) allows unauthenticated remote attackers to reach knowledge base content that the plugin's access-control settings were intended to restrict. Because the CVSS vector is PR:N/UI:N, no account or victim interaction is needed; the exposure is limited to confidentiality (C:L, CVSS 5.3), with no write or availability impact. No public exploit code has been identified at time of analysis, and there is no confirmed CISA KEV entry, so real-world exploitation is not established from the available data.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.2.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.