7 matches found
CVE-2023-22695
Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...
CVE-2023-6745
CVE-2023-6745 concerns the WordPress plugin Custom Field Template . The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s cpt shortcode in all versions up to 2.6.1, caused by insufficient input sanitization and output escaping on user-supplied post meta. Exploitation requires ...
PT-2024-15720
Name of the Vulnerable Software and Affected Versions Custom Field Template plugin for WordPress versions up to, and including, 2.6.1 Description The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...
CVE-2023-38392
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.9 versions...
CVE-2023-22695
Cross-Site Request Forgery CSRF vulnerability in Hiroaki Miyashita Custom Field Template plugin = 2.5.8 versions...
