Advisories · Technology
mischiefmarmot Create.
Every CVE that names mischiefmarmot Create among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter
- mischiefmarmot Create
- SQL injection
- CVSS 6.5 Medium
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter
- mischiefmarmot Create
- SQL injection
- CVSS 6.4 Medium
Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode
- mischiefmarmot Create
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'
- mischiefmarmot Create
- SQL injection