PT-2024-25882 · Unknown · Corona Virus (Covid-19) Banner & Live Data

Name of the Vulnerable Software and Affected Versions: Corona Virus COVID-19 Banner & Live Data versions 1.8.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the...

CVE-2022-43469

Cross-Site Request Forgery CSRF vulnerability in Orchestrated Corona Virus COVID-19 Banner & Live Data plugin = 1.7.0.6 versions...

CVE-2022-43469

CVE-2022-43469 affects the WordPress plugin “Orchestrated Corona Virus (COVID-19) Banner & Live Data” up to version 1.7.0.6, which is vulnerable to Cross-Site Request Forgery (CSRF). The Red Hat/NVD entries, Patchstack, PT-2023-14218 and other sources confirm CSRF with no patches available from t...