MediumCVSS 5.9
EPSS 0.24%
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
Vendor
Mark Jaquith vulnerabilities
2 published CVES affecting Mark Jaquith, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest Mark Jaquith CVEs
Newest publication first
-
-
MediumCVSS 4.3 EPSS 2.0%
Multiple cross-site scripting (XSS) vulnerabilities in bad-behavior-wordpress-admin.php in the Bad Behavior plugin before 2.0.47 and 2.2.x before 2.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) httpbl_key, (3) httpbl_ma...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.