CVE-2025-11763: Improper Neutralization of Input During Web Page Generation

The Display Pages Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'columncount' parameter in the display-pages shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

Cross site scripting

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...