EUVD-2022-51982

Malicious code in bioql PyPI...

CVE-2022-4658 RSSImport <= 4.6.1 - Contributor+ Stored XSS via Shortcode

The RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

PT-2023-14961 · WordPress · Rssimport

Name of the Vulnerable Software and Affected Versions: RSSImport WordPress plugin versions through 4.6.1 Description: The issue is related to the RSSImport WordPress plugin, which does not validate and escape one of its shortcode attributes. This could allow users with a role as low as contributo...