Social Comments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23977 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Social Comments

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2022-0876 MEDIUM POC This Month

The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS WordPress Social Comments

NVD WPScan

CVSS 3.1

4.8

EPSS

0.6%

CVE-2023-23977

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Social Comments

NVD

CVE-2022-0876

EPSS 1% CVSS 4.8

MEDIUM POC This Month

XSS WordPress Social Comments

NVD WPScan