PatchTheCVEcryoutcreations vulnerabilities
Recent CVEs affecting cryoutcreations products. 13 tracked.
cryoutcreations has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2024-12-20. Highest priority: CVE-2024-11108 (score 30/100).
- CVE-2024-45452 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-c
- CVE-2024-45451 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-c
- CVE-2024-44058 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-44057 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-44056 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-44054 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-44050 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-c
- CVE-2024-43994 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-43993 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-43952 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-43951 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-35762 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in C
- CVE-2024-11108 MEDIUM 5.4 UPGRADE The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes
FAQ
How do I fix cryoutcreations vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cryoutcreations being exploited right now?
None of the tracked cryoutcreations CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cryoutcreations CVE should I patch first?
CVE-2024-11108 currently ranks highest (30/100): The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes.