CVE-2026-42754: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon: from n/a through = 1.3.46...

CVE-2022-0471: Improper Neutralization of Input During Web Page Generation

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the jsonresulturl parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue...

WordPress Favicon by RealFaviconGenerator Plugin < 1.3.22 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

PT-2021-15965

Name of the Vulnerable Software and Affected Versions The Favicon by RealFaviconGenerator WordPress plugin versions 1.3.20 and earlier Description The issue is related to a Reflected Cross-Site Scripting XSS that occurs because one of the plugin's parameters is not properly sanitised or escaped...

CVE-2021-24437: Improper Neutralization of Input During Web Page Generation

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting XSS which is executed in the context of a logged administrator...