PT-2022-23934 · WordPress · Blossom Recipe Maker

Name of the Vulnerable Software and Affected Versions: Blossom Recipe Maker plugin versions 1.0.7 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...

CVE-2022-37338: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in Blossom Recipe Maker plugin = 1.0.7 at WordPress...

WordPress Blossom Recipe Maker plugin <= 1.0.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Blossom Recipe Maker plugin versions = 1.0.7. Solution Deactivate and delete. No reply from the vendor...

Blossom Recipe Maker < 1.0.8 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...