Phpwhois Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-43698 Nov 29, 12:15 MEDIUM POC This Month

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpwhois Phpwhois Project

NVD GitHub

CVSS 3.1

6.1

EPSS

0.6%

CVE-2015-3998 May 17, 14:29 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS Adsense Click Fraud Monitoring Phpwhois +1

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2021-43698

EPSS 1% CVSS 6.1

MEDIUM POC This Month

PHP XSS Phpwhois +1

NVD GitHub

CVE-2015-3998

EPSS 0% CVSS 6.1

MEDIUM This Month

PHP WordPress XSS +3

NVD