Login Request a demo
CF
Product
Custom Field Suite
by mgibbs189 · last CVE Jun 20, 2024
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Custom Field Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3562
8.8
1%
Jun 20
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field
Affected: through 2.6.7
CVE-2024-3561
8.8
1%
Jun 20
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Affected: through 2.6.7
CVE-2024-3558
5.4
0%
Jun 20
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
Affected: through 2.6.7
CVE-2024-3559
5.4
0%
Jun 12
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
Affected: through 2.6.7
CVE-2024-3068
4.8
1%
May 9
Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Affected: through 2.6.5
CVE-2024-0689
4.8
0%
Feb 29
Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Affected: through 2.6.4
Showing 6