t
tarteaucitron
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 11, 2023 to present
6
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
32/100
low
Severity Distribution
Critical
0High
0Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
CSRF
1
Most Affected Products
1. npm/tarteaucitronjs4
2. tarteaucitron tarteaucitron.js3
3. Amauri Tarteaucitronjs Node.js3
4. Couleurcitron Tarteaucitron-wp Wordpress2
5. tarteaucitron tarteaucitron-wp1
Recent Vulnerabilities
See more →CVE-2024-11719
CVSS 6.1medium
tarteaucitron.js for WordPress < 0.3.0 - Stored XSS via CSRF
May 15, 2025🔧 No Patch
CVE-2024-11718
CVSS 5.4medium
tarteaucitron.js for WordPress < 0.3.0 - Author+ Stored XSS
May 15, 2025
CVE-2025-31476
CVSS 4.8EPSS 0%medium
tarteaucitron.js allows url scheme injection via unfiltered inputs
Apr 7, 2025
CVE-2025-31475
CVSS 6.6EPSS 0%medium
tarteaucitron.js allows prototype pollution via custom text injection
Apr 7, 2025
CVE-2025-31138
CVSS 6.6EPSS 0%medium
tarteaucitron.js allows UI manipulation via unrestricted CSS injection
Apr 7, 2025
CVE-2023-3620
CVSS 5.4medium
Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js
Jul 11, 2023
Monitor tarteaucitron in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.