CVE-2022-4671

The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege use...

Cross site scripting

The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege use...

PT-2023-14993

Name of the Vulnerable Software and Affected Versions PixCodes WordPress plugin versions prior to 2.3.7 Description The issue concerns the PixCodes WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them. This could allow users with a role...