CVE-2023-4284

The CVE-2023-4284 entry corresponds to a cross-site scripting vulnerability in the WordPress Post Timeline plugin, affecting versions prior to 2.2.6. The root cause is failure to sanitize and escape an invalid nonce before echoing it in an AJAX response, resulting in a reflected XSS that can affe...

CVE-2024-13571

The Post Timeline WordPress plugin versions prior to 2.3.10 are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of a parameter before it is output back onto the page. This vulnerability could be leveraged to target high-privilege u...