7 matches found
CVE-2021-24408
The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in th...
CVE-2021-24408
The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in th...
CVE-2021-24409
The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator...
CVE-2021-24408
The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in th...
CVE-2021-24409
The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator...
PT-2021-15942
Name of the Vulnerable Software and Affected Versions Prismatic WordPress plugin versions prior to 2.8 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the tab GET parameter is not properly escaped before being outputted back in an attribute. This...
PT-2021-15941
Name of the Vulnerable Software and Affected Versions Prismatic WordPress plugin versions prior to 2.8 Description The issue allows users with a role as low as Contributor to set Cross-Site payload in some shortcode parameters due to a lack of sanitization or validation. A post made by a...