Vulnerabilities > Mediaron

DATE CVE VULNERABILITY TITLE RISK
2024-09-15 CVE-2024-44059 Cross-site Scripting vulnerability in Mediaron Custom Query Blocks
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MediaRon LLC Custom Query Blocks allows Stored XSS.This issue affects Custom Query Blocks: from n/a through 5.3.1.
network
low complexity
mediaron CWE-79
5.4
2018-06-26 CVE-2018-1000506 Cross-Site Request Forgery (CSRF) vulnerability in Mediaron Metronet TAG Manager 1.2.7
Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can.
network
low complexity
mediaron CWE-352
8.8