WordPress Sydney Toolbox plugin <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via aThemes: Portfolio Widget vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Sydney Toolbox versions = 1.31...

WordPress Sydney Toolbox Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)

Software Sydney Toolbox Type Plugin Vulnerable versions = 1.30 Fixed in 1.31 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4036 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 97f6b8b5f562 Credits stealthcopter Required...

WordPress Sydney Toolbox Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Software Sydney Toolbox Type Plugin Vulnerable versions = 1.25 Fixed in 1.26 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1447 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 84b6e924cbb5 Credits Webbernaut Required privile...