Kibokolabs: Security Vulnerabilities
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.
CVSS Score
6.1
EPSS Score
0.003
Published
2019-05-27
There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
CVSS Score
7.2
EPSS Score
0.086
Published
2018-12-03
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-03
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-03
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-03
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-03
These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-03
These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes
CVSS Score
4.8
EPSS Score
0.002
Published
2018-12-03
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable html_id.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-12-03