MediumCVSS 6.1
EPSS 1.4%
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
Product
bestwebsoft custom admin page vulnerabilities
2 published CVES affecting bestwebsoft custom admin page, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest bestwebsoft custom admin page CVEs
Newest publication first
-
-
MediumCVSS 6.1 EPSS 0.89%
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fie...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.