Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.4%	CVE-2025-23520Heartland Management Terminal · Cross-site Scripting High7.1EPSS 0.4%2025-03-03CVE Database V5CVE-2025-23520 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS. This issue affects Heartland Management Terminal: from n/a through 1.3.0. EPSS 0.4%Vulnerability SecureSubmit #cwe-79	CVE Database V5	2025-03-03
Medium	5.3	EPSS 0.4%	CVE-2024-56270WP SecureSubmit · Missing Authorization Medium5.3EPSS 0.4%2025-01-07CVE Database V5CVE-2024-56270 Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Retrieve Embedded Sensitive Data.This issue affects WP SecureSubmit: from n/a through <= 1.5.20. EPSS 0.4%Vulnerability SecureSubmit	CVE Database V5	2025-01-07
Medium	4.3	EPSS 0.3%	CVE-2024-56271WP SecureSubmit · Missing Authorization Medium4.3EPSS 0.3%2025-01-07CVE Database V5CVE-2024-56271 Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through <= 1.5.20. EPSS 0.3%Vulnerability SecureSubmit	CVE Database V5	2025-01-07

Showing 1–3 of 3 results