MediumCVSS 6.1
EPSS 1.4%
The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.
Product
Smackcoders Inc. echo sign vulnerabilities
2 published CVES affecting Smackcoders Inc. echo sign, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Smackcoders Inc. echo sign CVEs
Newest publication first
-
-
MediumCVSS 6.1 EPSS 1.4%
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.