3 matches found
Simple Certain Time to Show Content - Cross-Site Scripting
Simple Certain Time to Show Content WordPress plugin 1.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users such as admin, explo...
CVE-2024-10152: Improper Neutralization of Input During Web Page Generation
The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Simple Certain Time to Show Content plugin <= 1.2.2 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Simple Certain Time to Show Content versions = 1.2.2...