42 matches found
CVE-2022-29406: Improper Neutralization of Input During Web Page Generation
Multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in DynamicWebLab's WordPress Team Manager plugin = 1.6.9 at WordPress...
5.4CVSS6AI score0.00624EPSS
SaveExploits1References2
WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Team Manager plugin versions = 1.6.9. Solution Deactivate and delete. No reply from the vendor...
5.4CVSS3.4AI score0.00624EPSS
SaveExploits1Affected Software1
20