WordPress Leyka Plugin <= 3.30.3 is vulnerable to Cross Site Scripting (XSS)

Software Leyka Type Plugin Vulnerable versions = 3.30.3 Fixed in 3.30.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2995 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID 55473173d1a6 Credits An Dang Required privilege...

Leyka < 3.30.4 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Note: The issue was reported to the...

Leyka < 3.30.3 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-39314

CVE-2023-39314 affects the Leyka WordPress plugin (Teplitsa of social technologies) v1.x, specifically versions

CVE-2023-39314 WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-39314 WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

WordPress plugin Leyka cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)

Software Leyka Type Plugin Vulnerable versions = 3.30.2 Fixed in 3.30.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39314 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 06bb9ec2d315 Credits Phd Required privilege Unauthenticated...

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27450

CVE-2023-27450 is an unauthenticated stored XSS in the WordPress Leyka plugin (

CVE-2023-27450 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27450 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

PT-2023-21138 · Teplitsa Of Social Technologies · Leyka Plugin

Name of the Vulnerable Software and Affected Versions: Teplitsa of social technologies Leyka plugin versions = 3.29.2 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected device...

WordPress plugin Leyka 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Leyka < 3.30.3 - Subscriber+ Privilege Escalation

The plugin does not validate password to be updated, allowing any authenticated user, such as subscriber to set the password of another user...

Leyka < 3.30.2 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...