CVE-2024-12166

CVE-2024-12166 refers to a vulnerability in the WordPress plugin Shortcodes Blocks Creator Ultimate (versions up to 2.2.0). The issue is a reflected cross-site scripting (XSS) via the page parameter caused by insufficient input sanitization and output escaping. This allows an unauthenticated atta...

CVE-2024-12167

CVE-2024-12167 affects the WordPress plugin Shortcodes Blocks Creator Ultimate (versions up to 2.2.0). It enables Reflected Cross-Site Scripting via the _wpnonce parameter due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts in pages tha...