GoodLayers kayıtları
goodlayers üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %71,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2020-27481Kavram kanıtı | An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPrgoodlayers · good learning management system · CWE-89 | Kritik9,8 | — | %10,0 | 12 Kas 2020 |
35İzleyin | CVE-2024-13369İstismar yok | Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parametergoodlayers · tour master · CWE-89 | Yüksek8,8 | — | %0,5 | 18 Şub 2025 |
28İzleyin | CVE-2024-12400İstismar yok | Tourmaster < 5.3.5 - Reflected XSSgoodlayers · tour master · CWE-79 | Yüksek7,1 | — | %0,3 | 30 Oca 2025 |
26İzleyin | CVE-2024-12163İstismar yok | GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Uploadgoodlayers · goodlayers core · CWE-79 | Orta6,5 | — | %0,3 | 30 Oca 2025 |
24İzleyin | CVE-2024-11846İstismar yok | Travel Tour < 5.2.4 - Reflected XSSgoodlayers · travel tour · CWE-79 | Orta6,1 | — | %0,4 | 1 Oca 2025 |
24İzleyin | CVE-2024-11356İstismar yok | Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Bookinggoodlayers · tour master · CWE-79 | Orta6,1 | — | %0,4 | 6 Oca 2025 |
23İzleyin | CVE-2024-11357İstismar yok | Goodlayers Core < 2.0.10 - Contributor+ Stored XSSgoodlayers · goodlayers core · CWE-79 | Orta5,9 | — | %0,3 | 2 Oca 2025 |
- CVE-2020-2748142Planlayın
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPr
KritikCVSS 9,8Kavram kanıtıEPSS %10goodlayers · good learning management system12 Kas 2020
- CVE-2024-1336935İzleyin
Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter
YüksekCVSS 8,8İstismar yokEPSS %0goodlayers · tour master18 Şub 2025
- CVE-2024-1240028İzleyin
Tourmaster < 5.3.5 - Reflected XSS
YüksekCVSS 7,1İstismar yokEPSS %0goodlayers · tour master30 Oca 2025
- CVE-2024-1216326İzleyin
GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload
OrtaCVSS 6,5İstismar yokEPSS %0goodlayers · goodlayers core30 Oca 2025
- CVE-2024-1184624İzleyin
Travel Tour < 5.2.4 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %0goodlayers · travel tour1 Oca 2025
- CVE-2024-1135624İzleyin
Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking
OrtaCVSS 6,1İstismar yokEPSS %0goodlayers · tour master6 Oca 2025
- CVE-2024-1135723İzleyin
Goodlayers Core < 2.0.10 - Contributor+ Stored XSS
OrtaCVSS 5,9İstismar yokEPSS %0goodlayers · goodlayers core2 Oca 2025