Skip to content

Vendor

post highlights projects vulnerabilities

1 published CVE affecting post highlights projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of post highlights projects alerts

Products

Latest post highlights projects CVEs

Newest publication first

  1. CVE-2014-8087 post highlights 2.0 - 2.6 - Cross-Site Scripting

    Published
    MediumCVSS 6.1 EPSS 1.9%

    Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.