Vulnerabilities > Pixelimity
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-05-03 | CVE-2022-28589 | Cross-site Scripting vulnerability in Pixelimity 1.0 A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=add_new | 4.8 |
| 2022-05-03 | CVE-2022-28590 | Unspecified vulnerability in Pixelimity 1.0 A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme. | 7.2 |
| 2022-03-31 | CVE-2021-42866 | Cross-site Scripting vulnerability in Pixelimity 1.0 A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php | 4.8 |
| 2021-08-17 | CVE-2021-29056 | Cross-site Scripting vulnerability in Pixelimity 1.0 Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php. | 4.8 |
| 2021-01-19 | CVE-2020-23522 | Cross-Site Request Forgery (CSRF) vulnerability in Pixelimity 1.0 Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter. | 6.8 |
| 2018-12-06 | CVE-2018-19919 | Cross-site Scripting vulnerability in Pixelimity 1.0 Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element. | 4.8 |