CVE-2023-46308

In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...

Code injection

In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...

CVE-2023-46308

In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...

CVE-2023-46308

In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty...

CVE-2023-46308

CVE-2023-46308 affects the Plotly library plotly.js prior to 2.25.2. The issue is a prototype pollution flaw in the plot API calls (expandObjectPaths/nestedProperty) that could lead to remote code execution or denial of service. Public references indicate the fix is in plotly.js v2.25.2 and later...

CVE-2015-5484

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

Cross site scripting

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

CVE-2015-5484

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

CVE-2015-5484

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

CVE-2015-5484

CVE-2015-5484 is a stored XSS vulnerability in the WordPress Plotly plugin prior to 1.0.3. It allows remote authenticated users to inject arbitrary script/HTML into posts, potentially affecting other site users. Affected component: Plotly WordPress plugin; vulnerability path: XSS via post content...

PT-2020-7865

Name of the Vulnerable Software and Affected Versions: Plotly plugin versions prior to 1.0.3 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via a post, which can lead to cross-site scripting XSS. Recommendations: For Plotly plugin versions prior to...

CVE-2015-5484: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

WordPress wp-plotly plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-plotly is a plugin for embedding interactive Plotly charts in pages. A cross-site scripting vulnerability exists in the WordPress...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

Design/Logic Flaw

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

CVE-2015-9347

The wp-plotly WordPress plugin (versions prior to 1.0.3) is affected by a cross-site scripting (XSS) vulnerability. The issue arises from insufficient validation of client-side data in the plugin, enabling an attacker to execute client-side code. Some sources reference an authenticated stored XSS...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

CVE-2015-9347: Improper Neutralization of Input During Web Page Generation

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

PT-2019-7306

Name of the Vulnerable Software and Affected Versions wp-plotly plugin versions prior to 1.0.3 Description The issue allows authors to perform cross-site scripting XSS attacks. Recommendations For wp-plotly plugin versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue...