Skip to content
OpenAdvisories

Vendor

nofearinc

4 known vulnerabilities.

Products

WP-CRM System – Manage Clients and Projects 2 DX Unanswered Comments 1 DX Share Selection 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-2001

    DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting

    The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxss_admin_page() function found in the ~/dx-share-selection.php file. This makes it p…

    nofearinc DX Share Selection Web / CMS