Known vulnerabilities in Woody ad snippets - insert any code, text, or ads via using conditions
Software CPE:
cpe:2.3:a:webcraftic:insert-php:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46786 - Cross-Site Request Forgery (CSRF) |
CWE-352 | Low | 2.3.10 | 17.09.2020 |
SB2020091716 |
||
| #VU19930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 2.2.5 | 05.08.2019 |
SB2019080207 |
||
| #VU19929 - Improper Privilege Management |
CWE-269 | High | 2.2.5 | 05.08.2019 |
SB2019080207 |