EUVD-2023-12424

Malicious code in bioql PyPI...

CVE-2023-0363

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

WordPress Scheduled Announcements Widget Plugin < 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Scheduled Announcements Widget Type Plugin Vulnerable versions 1.0 Fixed in 1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0363 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6f6b4c3427c3 Credits Lana Code...

CVE-2023-0363

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2023-0363

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2023-0363 Scheduled Announcements Widget < 1.0 - Contributor+ Stored XSS

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2023-0363

CVE-2023-0363 affects the Scheduled Announcements Widget WordPress plugin prior to 1.0. The root cause is insufficient validation/escaping of shortcode attributes, allowing Stored Cross-Site Scripting when the shortcode is embedded in a page or post. Exploitation potential requires Contributor+ p...

CVE-2023-0363: Improper Neutralization of Input During Web Page Generation

The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

WordPress plugin Scheduled Announcements Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2023-16213 · WordPress · Scheduled Announcements Widget

Name of the Vulnerable Software and Affected Versions: Scheduled Announcements Widget WordPress plugin versions prior to 1.0 Description: The issue arises from the lack of validation and escaping of some shortcode attributes in the Scheduled Announcements Widget WordPress plugin. This could allow...