WordPress Easy Textillate Plugin <= 2.02 is vulnerable to Cross Site Scripting (XSS)

Software Easy Textillate Type Plugin Vulnerable versions = 2.02 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32526 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 449b07d55d23 Credits Ngô Thiên An ancorn from VNPT-VCI Require...

CVE-2024-2303

CVE-2024-2303 refers to a Stored XSS in the Easy Textillate WordPress plugin via the textillate shortcode. Affected: Easy Textillate for WordPress, all versions up to and including 2.01. Attack requires authentication at contributor level or higher to inject scripts into user‑visible pages, which...