3 matches found
CVE-2024-13329
The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-1377 Solidres <= 0.9.4 - Multiple Reflected XSS
The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
PT-2023-16941 · WordPress · Solidres Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: Solidres WordPress plugin versions 0.9.4 and earlier Description: The issue is related to Reflected Cross-Site Scripting, which occurs because the plugin does not properly sanitise and escape numerous parameters before outputting them back in...