CVE-2022-33961

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WaspThemes Visual CSS Style Editor plugin = 7.5.8 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WaspThemes Visual CSS Style Editor plugin = 7.5.8 versions...

CVE-2022-33961: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WaspThemes Visual CSS Style Editor plugin = 7.5.8 versions...

PT-2023-13328

Name of the Vulnerable Software and Affected Versions WaspThemes Visual CSS Style Editor plugin versions = 7.5.8 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations For versions = 7.5.8, update to...

PT-2019-12543

Name of the Vulnerable Software and Affected Versions WaspThemes Visual CSS Style Editor plugin versions prior to 7.2.1 Description The issue allows for a CSRF attack, potentially granting admin access through the use of yp remote get. Recommendations For versions prior to 7.2.1, update to versio...

CVE-2019-11886: Cross-Site Request Forgery (CSRF)

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access...