Meks Easy Ads Widget

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-37548 Jul 21, 07:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Easy Ads Widget allows Stored XSS.0.8. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Meks Easy Ads Widget Mekshq

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-25989 Oct 03, 12:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Meks Smart Social Widget Meks Easy Photo Feed Widget Meks Audio Player Meks Easy Ads Widget +7

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2024-37548

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Meks Easy Ads Widget Mekshq

NVD

CVE-2023-25989

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Meks Smart Social Widget Meks Easy Photo Feed Widget +9

NVD