28 matches found
PT-2023-32488 · WordPress · Eazydocs
Name of the Vulnerable Software and Affected Versions: EazyDocs WordPress plugin versions prior to 2.3.4 Description: The issue arises from the improper sanitization and escaping of the data parameter before its use in an SQL statement via an AJAX action. This could allow any authenticated users ...
EazyDocs < 2.3.6 - Reflected XSS
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-47549
Unauth. Reflected Cross-Site Scripting XSS vulnerability on 302 response page in spider-themes EazyDocs plugin = 2.3.3 versions...
CVE-2023-47549 WordPress EazyDocs Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability on 302 response page in spider-themes EazyDocs plugin = 2.3.3 versions...
CVE-2023-47549
CVE-2023-47549 is an unauthenticated reflected XSS in EazyDocs for WordPress (spider-themes) affecting <=2.3.3 (and up to
WordPress Plugin EazyDocs Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress EazyDocs Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)
Software EazyDocs Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47549 Patch priority High CVSS severity High 6.8 Developer Claim ownership PSID 1e8fa9f4a641 Credits minhtuanact Required privile...
WordPress EazyDocs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Software EazyDocs Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c6b527c9fb24 Credits Rafie Muhammad Patchstack Required...