3 matches found
EUVD-2024-33761
Malicious code in bioql PyPI...
6.4CVSS8.6AI score0.0046EPSS
SaveExploits0References4
CVE-2024-11227
The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's memberliteaccordion shortcode in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
6.4CVSS0.0046EPSS
SaveExploits0References4
CVE-2023-5237
The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
5.4CVSS5.8AI score0.00449EPSS
SaveExploits2References2
20