Dynamic Content Personalization@* Security Vulnerabilities and Issues — Dynamic Content Personalization@* CVE List

Lucene search

If-soDynamic Content Personalization*

3 matches found

CVE•added 2024/02/10 9:15 a.m.•50 views

CVE-2023-51492

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1.

6.5CVSS5.4AI score0.00065EPSS

CVE•added 2024/07/13 6:15 a.m.•46 views

CVE-2024-5713

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

5.4CVSS5.4AI score0.00027EPSS

CVE•added 2024/07/13 6:15 a.m.•36 views

CVE-2024-6070

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in mul...

4.8CVSS4.7AI score0.00101EPSS