Vulnerabilities

7 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: marcomilesi ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2024-22291	Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3. NVD description · AI analysis pending	8.8	<1%		marcomilesi browser theme color	—	Jan 31, 2024
CVE-2023-47245	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions. Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions. NVD description · AI analysis pending	4.8	<1%		marcomilesi anac xml viewer	—	Nov 16, 2023
CVE-2023-47242	Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. NVD description · AI analysis pending	5.4	<1%		marcomilesi anac xml bandi di gara	—	Nov 16, 2023
CVE-2023-47656	Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. NVD description · AI analysis pending	5.4	<1%		marcomilesi anac xml bandi di gara	—	Nov 14, 2023
CVE-2023-45651	Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11. NVD description · AI analysis pending	8.8	<1%		marcomilesi wp attachments	—	Oct 16, 2023
CVE-2022-4330	The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). NVD description · AI analysis pending	4.8	<1%	PoC	marcomilesi wp attachments	—	Jan 16, 2023
CVE-2022-3469	The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to per The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). NVD description · AI analysis pending	4.8	<1%	PoC	marcomilesi wp attachments	—	Nov 14, 2022