Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-1938

Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate analytics data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against a logged in admin viewing the plugin's settings

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Awin
Products
Awin Data Feed
CVE-2022-1937

Awin Data Feed < 1.8 - Reflected Cross-Site Scripting

The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
Awin
Products
Awin Data Feed