Lucene search
+L
StpetedesignCall Now Accessibility Button

3 matches found

CVE
CVE
added 2023/07/10 12:40 p.m.59 views

CVE-2023-2028

The CVE-2023-2028 issue affects the Call Now Accessibility Button WordPress plugin and is caused by improper sanitization of certain settings. Versions prior to 1.1 allow Stored Cross-Site Scripting (XSS) by high-privilege users even when unfiltered_html is disallowed (e.g., in multisite). Public...

4.8CVSS4.8AI score0.00503EPSS
Save
CVE
CVE
added 2023/06/12 3:10 p.m.51 views

CVE-2023-28933

CVE-2023-28933 affects the WordPress plugin Call Now Accessibility Button by StPeteDesign, version

5.9CVSS5.1AI score0.00369EPSS
Save
CVE
CVE
added 2023/07/10 12:41 p.m.50 views

CVE-2023-2635

CVE-2023-2635 concerns the WordPress plugin Call Now Accessibility Button (versions prior to 1.1). The issue is that the plugin does not sanitize and escape certain settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, such as in multisite d...

4.8CVSS4.7AI score0.00542EPSS
Save