Vulnerabilities (CVE)

Filtered by vendor Onesignal Subscribe
Filtered by product Onesignal-free-web-push-notifications
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15827 1 Onesignal 1 Onesignal-free-web-push-notifications 2024-11-21 3.5 LOW 5.4 MEDIUM
The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.