iONE360 vulnerabilities
We track 2 vulnerabilities in iONE360 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest iONE360 vulnerabilities
- 7.2 High severity
iONE360 configurator: Improper Neutralization of Input During Web Page Generation
The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Form Parameters in all versions up to, and including, 2.0.57 due to insufficient input sanitization and output escaping. This makes it possible for unaut
- 7.1 High severity
iONE360 configurator: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n/a through <= 2.0.57.