Meks Easy Ads Widget

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-37548 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Easy Ads Widget allows Stored XSS.0.8. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Meks Easy Ads Widget

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-25989 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Meks Audio Player Meks Easy Ads Widget Meks Easy Maps Meks Easy Photo Feed Widget +6

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2024-37548

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Meks Easy Ads Widget

NVD

CVE-2023-25989

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Meks Audio Player Meks Easy Ads Widget +8

NVD