Vendor

Cryoutcreations

Products

CVEs

Across products

Status

Private

Products

Serious Slider
2 CVEs
Esotera
1 CVE
Fluida
1 CVE
Kahuna
1 CVE
Liquido
1 CVE
Mantra
1 CVE
Nirvana
1 CVE
Parabola
1 CVE
Roseta
1 CVE
Septera
1 CVE
Tempera
1 CVE
Verbosa
1 CVE

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2024-43994	Cryoutcreations Kahuna	Med	0.42	6.5	Sep 18, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0.
CVE-2024-43993	Cryoutcreations Liquido	Med	0.42	6.5	Sep 18, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2.
CVE-2024-45452	Cryoutcreations Septera	Med	0.42	6.5	Sep 17, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Septera septera allows Stored XSS.This issue affects Septera: from n/a through <= 1.5.1.
CVE-2024-45451	Cryoutcreations Roseta	Med	0.42	6.5	Sep 17, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through <= 1.3.0.
CVE-2024-44050	Cryoutcreations Verbosa	Med	0.42	6.5	Sep 17, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Verbosa verbosa allows Stored XSS.This issue affects Verbosa: from n/a through <= 1.2.3.
CVE-2024-44058	Cryoutcreations Parabola	Med	0.42	6.5	Sep 15, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1.
CVE-2024-44057	Cryoutcreations Nirvana	Med	0.42	6.5	Sep 15, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.
CVE-2024-44056	Cryoutcreations Mantra	Med	0.42	6.5	Sep 15, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2.
CVE-2024-44054	Cryoutcreations Fluida	Med	0.42	6.5	Sep 15, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8.
CVE-2024-43952	Cryoutcreations Esotera	Med	0.42	6.5	Aug 29, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.
CVE-2024-43951	Cryoutcreations Tempera	Med	0.42	6.5	Aug 29, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.
CVE-2024-35762	Cryoutcreations Serious Slider	Med	0.42	6.5	Jun 21, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.
CVE-2024-11108	WordPress Serious Slider	Med	0.35	5.4	Dec 20, 2024	The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site…

CVE-2024-43994MedSep 18, 2024
Cryoutcreations
Kahuna
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0.
CVE-2024-43993MedSep 18, 2024
Cryoutcreations
Liquido
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2.
CVE-2024-45452MedSep 17, 2024
Cryoutcreations
Septera
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Septera septera allows Stored XSS.This issue affects Septera: from n/a through <= 1.5.1.
CVE-2024-45451MedSep 17, 2024
Cryoutcreations
Roseta
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through <= 1.3.0.
CVE-2024-44050MedSep 17, 2024
Cryoutcreations
Verbosa
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Verbosa verbosa allows Stored XSS.This issue affects Verbosa: from n/a through <= 1.2.3.
CVE-2024-44058MedSep 15, 2024
Cryoutcreations
Parabola
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1.
CVE-2024-44057MedSep 15, 2024
Cryoutcreations
Nirvana
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.
CVE-2024-44056MedSep 15, 2024
Cryoutcreations
Mantra
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2.
CVE-2024-44054MedSep 15, 2024
Cryoutcreations
Fluida
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8.
CVE-2024-43952MedAug 29, 2024
Cryoutcreations
Esotera
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.
CVE-2024-43951MedAug 29, 2024
Cryoutcreations
Tempera
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.
CVE-2024-35762MedJun 21, 2024
Cryoutcreations
Serious Slider
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.
CVE-2024-11108MedDec 20, 2024
WordPress
Serious Slider
risk 0.35cvss 5.4epss 0.00
The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site…