Vulnerabilities

Summary — last 7 days

New vulnerabilities2,856▼ 331 vs. last week
Critical / high1,383▼ 38 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)292▼ 217 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (4.3)1.6%—Diversesolutions Dsidxpress IDX Plugin7/1/20146/17/2026
Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.