2 matches found
CVE-2024-21750
CVE-2024-21750 affects the WordPress Shortcodes Finder plugin ( 1.5.5 (i.e., 1.5.6 or later) to mitigate exploitation. The connected materials also corroborate the vulnerability’s classification as Cross-Site Scripting and list the affected component as the Shortcodes Finder plugin for WordPress.
CVE-2023-47695
The CVE-2023-47695 entry concerns the WordPress plugin Scribit Shortcodes Finder (versions ≤ 1.5.3). The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of parameters, allowing an attacker to inject scripts into pages vie...