EUVD-2022-48272

Malicious code in bioql PyPI...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in iFeature Slider plugin = 1.2 on WordPress...

CVE-2022-45375

The CVE-2022-45375 entry concerns WordPress iFeature Slider plugin ≤ 1.2, with an Auth. (contributor+) Stored Cross‑Site Scripting (XSS) vulnerability. The root cause is inadequate sanitisation/escaping of input parameters by the plugin, enabling a user with Contributor+ role to inject scripts th...

PT-2022-27479 · Unknown · Ifeature Slider

Name of the Vulnerable Software and Affected Versions: iFeature Slider plugin version 1.2 and earlier Description: A Stored Cross-Site Scripting XSS issue exists, allowing contributors or higher to inject malicious scripts. Recommendations: For iFeature Slider plugin version 1.2 and earlier, upda...