Threat database

9 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-108498BSK PDF Manager · Cross-site Scripting High7.1EPSS 0.1%2026-10-15CVE Database V5CVE-2026-108498 CVE-2026-108498 is a high-severity Stored Cross-site Scripting (XSS) vulnerability in bannersky BSK PDF Manager versions up to and including 3.8.1. It arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. The vulnerability has a CVSS 3.1 score of 7.1, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided. EPSS 0.1%Vulnerability bannersky	CVE Database V5	2026-10-15
Medium	6.5	EPSS 0.2%	CVE-2026-65528BSK PDF Manager · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65528 Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions. EPSS 0.2%Vulnerability bannersky #cwe-79	CVE Database V5	2026-07-23
Medium	5.3	EPSS 0.3%	CVE-2026-39686BSK PDF Manager · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39686 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through <= 3.7.2. EPSS 0.3%Vulnerability bannersky	CVE Database V5	2026-04-08
Medium	5.5	EPSS 0.3%	CVE-2025-4970BSK PDF Manager · Cross-site Scripting Medium5.5EPSS 0.3%2025-12-12CVE Database V5CVE-2025-4970 The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. This only affects multi-site installations and installations where unfiltered_html has been disabled. EPSS 0.3%Vulnerability bannersky #cwe-79	CVE Database V5	2025-12-12
High	7.1	EPSS 0.3%	CVE-2025-24545BSK Forms Validation · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in bannersky BSK… High7.1EPSS 0.3%2025-02-03CVE Database V5CVE-2025-24545 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Validation bsk-gravity-forms-custom-validation allows Reflected XSS.This issue affects BSK Forms Validation: from n/a through <= 1.7. EPSS 0.3%Vulnerability bannersky	CVE Database V5	2025-02-03
High	8.2	EPSS 0.2%	CVE-2025-22347BSK Forms Blacklist · Cross-Site Request Forgery (CSRF) High8.2EPSS 0.2%2025-01-07CVE Database V5CVE-2025-22347 Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through <= 3.9. EPSS 0.2%Vulnerability bannersky	CVE Database V5	2025-01-07
High	7.1	EPSS 0.3%	CVE-2024-47624BSK Forms Blacklist · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in bannersky BSK… High7.1EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47624 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through <= 3.8.1. EPSS 0.3%Vulnerability bannersky	CVE Database V5	2024-10-05
High	7.1	EPSS 0.3%	CVE-2024-43233BSK Forms Blacklist · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.1EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43233 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through 3.8. EPSS 0.3%Vulnerability BannerSky #cwe-79	CVE Database V5	2024-08-12
Medium	6.5	EPSS 0.3%	CVE-2024-38767BSK PDF Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-07-20CVE Database V5CVE-2024-38767 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky.Com BSK PDF Manager allows Stored XSS.This issue affects BSK PDF Manager: from n/a through 3.6. EPSS 0.3%Vulnerability BannerSky.com #cwe-79	CVE Database V5	2024-07-20

Showing 1–9 of 9 results