CVE-2023-4284

The CVE-2023-4284 entry corresponds to a cross-site scripting vulnerability in the WordPress Post Timeline plugin, affecting versions prior to 2.2.6. The root cause is failure to sanitize and escape an invalid nonce before echoing it in an AJAX response, resulting in a reflected XSS that can affe...

CVE-2024-13571

CVE-2024-13571 affects the Post Timeline WordPress plugin prior to version 2.3.10. The issue is a Reflected Cross-Site Scripting (XSS) caused by insufficient sanitization/escaping of a parameter before it is output on the page, which could be exploited against high-privilege users (e.g., admins)....