CVE-2022-2515

The CVE-2022-2515 issue affects the WordPress Simple Banner plugin (versions up to and including 2.11.0). It is a Stored Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping in the pro_version_activation_code setting. Authenticated attackers (including tho...

CVE-2024-12769

The Simple Banner WordPress plugin versions prior to 3.0.4 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform Stored XSS attacks, even...

CVE-2022-0446

The CVE concerns the Simple Banner WordPress plugin prior to version 2.12.0. Root cause: improper sanitization of the "Simple Banner Text" settings, enabling stored Cross-Site Scripting by high-privilege users even when unfiltered_html is disallowed. Affected product/versions: Simple Banner WordP...

CVE-2021-24574

CVE-2021-24574 affects the WordPress Simple Banner plugin, prior to version 2.10.4. Affected component: a setting that is not sanitized/escaped, enabling authenticated users (e.g., admins) to inject a Cross-Site Scripting payload. Root cause per the documents: lack of proper sanitization/escaping...