EUVD-2023-12170

Malicious code in bioql PyPI...

CVE-2023-0069

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0069

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0069 WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0069

The CVE-2023-0069 entry concerns the WordPress plugin WPaudio MP3 Player up to version 4.0.2 . The issue is a stored cross-site scripting (XSS) vulnerability caused by not validating/escaping certain shortcode attributes before rendering them in posts/pages, enabling users with the contributor ro...

CVE-2023-0069: Undefined Security Weakness

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-15986

Name of the Vulnerable Software and Affected Versions WPaudio MP3 Player WordPress plugin versions 4.0.2 and earlier Description The issue is related to the WPaudio MP3 Player WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a...

WordPress plugin WPaudio MP3 Player has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...