Lucene search
K

7 matches found

Cvelist
Cvelist
โ€ขadded 2025/09/06 2:24 a.m.โ€ข9 views

CVE-2025-9853 Optio Dentistry <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00053EPSS
Exploits0References3
CVE
CVE
โ€ขadded 2025/09/06 2:24 a.m.โ€ข18 views

CVE-2025-9853

Optio Dentistry for WordPress is vulnerable to a Stored Cross-Site Scripting (stored XSS) via the optio-lightbox shortcode in all versions up to 2.2. The root cause is insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticated attackers with contributo...

6.4CVSS4.7AI score0.00053EPSS
Exploits0References3
Positive Technologies
Positive Technologies
โ€ขadded 2025/09/06 12:0 a.m.โ€ข1 views

PT-2025-36354

Name of the Vulnerable Software and Affected Versions: Optio Dentistry plugin for WordPress versions prior to 2.3 Description: The plugin is susceptible to Stored Cross-Site Scripting via the optio-lightbox shortcode due to insufficient input sanitization and output escaping on user-supplied...

6.4CVSS5.3AI score0.00053EPSS
Exploits0References7
CNNVD
CNNVD
โ€ขadded 2025/09/06 12:0 a.m.โ€ข1 views

WordPress plugin Optio Dentistry ่ทจ็ซ™่„šๆœฌๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00053EPSS
Exploits0References4
CNNVD
CNNVD
โ€ขadded 2024/12/24 12:0 a.m.โ€ข1 views

WordPress plugin Optio Dentistry ่ทจ็ซ™่„šๆœฌๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00233EPSS
Exploits0References4
Positive Technologies
Positive Technologies
โ€ขadded 2024/12/24 12:0 a.m.โ€ข2 views

PT-2024-17632 ยท WordPress ยท Optio Dentistry

Name of the Vulnerable Software and Affected Versions: Optio Dentistry plugin for WordPress versions up to, and including, 2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS8AI score0.00233EPSS
Exploits0References9
Patchstack
Patchstack
โ€ขadded 2024/12/23 5:35 p.m.โ€ข3 views

WordPress Optio Dentistry plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Optio Dentistry versions = 2.1...

6.4CVSS5.7AI score0.00233EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder