Recall-products Project Recall-products — known CVE vulnerabilities

Every CVE whose affected-product data names Recall-products Project Recall-products, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-25379 — CVSS 8.8 (high): Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an…
• CVE-2020-25380 — CVSS 5.4 (medium): Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the 'Recall Settings' field…