Cross site scripting

The Tab Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5704

CVE-2023-5704 refers to the CPO Shortcodes plugin for WordPress (versions

CVE-2023-5704 CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The CPO Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

CVE-2023-5338 Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Theme Blvd Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5338 Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Theme Blvd Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5338

CVE-2023-5338 (Theme Blvd Shortcodes, WordPress) Vulnerability: Stored Cross-Site Scripting via shortcode attributes in Theme Blvd Shortcodes for WordPress. Affected when using shortcodes in versions up to and including 1.6.8 due to insufficient input sanitization and output escaping on user-supp...

PT-2023-32277 · WordPress · Cpo Shortcodes

Name of the Vulnerable Software and Affected Versions: CPO Shortcodes plugin for WordPress versions up to, and including, 1.5.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's shortcodes, allowing authenticated...

WordPress Plugin CPO Shortcodes Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin Theme Blvd Shortcodes Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin BP Profile Shortcodes Extra Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Bootstrap Shortcodes Ultimate Type Plugin Vulnerable versions = 4.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 29366c5c1adb Credits Ngô Thiên An ancorn from...

ShortCodes UI <= 1.9.8 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)

Software BP Profile Shortcodes Extra Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47815 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 426f08e56edb Credits Ngô Thiên An ancorn from...

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

CVE-2023-47695

The CVE-2023-47695 entry concerns the WordPress plugin Scribit Shortcodes Finder (versions ≤ 1.5.3). The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of parameters, allowing an attacker to inject scripts into pages vie...

CVE-2023-47695 WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

CVE-2023-23800

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

CVE-2023-23800

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...