Meks Smart Author Widget

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-37958 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Smart Author Widget allows Stored XSS.1.4. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Meks Smart Author Widget

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-25989 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Meks Audio Player Meks Easy Ads Widget Meks Easy Maps Meks Easy Photo Feed Widget +6

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2024-37958

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Meks Smart Author Widget

NVD

CVE-2023-25989

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Meks Audio Player Meks Easy Ads Widget +8

NVD