3 matches found
CVE-2024-11383
The CC Canadian Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cc-mortgage-canada' shortcode in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-11383 CC Canadian Mortgage Calculator <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The CC Canadian Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cc-mortgage-canada' shortcode in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2024-11383
CVE-2024-11383 – Stored XSS in CC Canadian Mortgage Calculator WordPress plugin : Affected is the CC Canadian Mortgage Calculator plugin for WordPress (versions up to 2.1.0). The issue arises from insufficient input sanitization and output escaping on user-supplied attributes within the shortcode...