WordPress plugin Quran Multilingual Text & Audio: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugi...

PT-2024-17376 · WordPress · Quran Multilanguage Text & Audio

Name of the Vulnerable Software and Affected Versions: The Quran multilanguage Text & Audio plugin for WordPress versions prior to 2.3.22 Description: The issue is related to Reflected Cross-Site Scripting via the sourate and lang parameters due to insufficient input sanitization and output...

CVE-2024-11973: Improper Neutralization of Input During Web Page Generation

The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sourate' and 'lang' parameter in all versions up to, and including, 2.3.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...