Lucene search
K

6 matches found

CNVD
CNVD
added 2025/11/27 12:0 a.m.1 views

WordPress Just Highlight plugin cross-site scripting vulnerability

WordPress Just Highlight plugin is a WordPress plugin mainly used for highlighting code snippets in posts or pages with syntax highlighting support. WordPress Just Highlight plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and...

4.4CVSS6.2AI score0.00183EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/26 7:58 a.m.15 views

CVE-2025-13311

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS5AI score0.00183EPSS
Exploits0References1
NVD
NVD
added 2025/11/25 8:15 a.m.5 views

CVE-2025-13311

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS0.00183EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 7:28 a.m.3 views

CVE-2025-13311 Just Highlight <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS4.7AI score0.00183EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/25 12:1 a.m.2 views

WordPress Just Highlight plugin <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'Highlight Color' Setting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Just Highlight versions = 1.0.3...

4.4CVSS5.8AI score0.00183EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.2 views

WordPress plugin Just Highlight 跨站脚本漏洞

WordPress Just Highlight plugin is a WordPress plugin mainly used for highlighting code snippets in posts or pages with syntax highlighting support. WordPress Just Highlight plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and...

4.4CVSS6.1AI score0.00183EPSS
Exploits0References4
Rows per page
Query Builder