2 matches found
CVE-2023-4775
CVE-2023-4775 affects the WordPress plugin Advanced iFrame. The vulnerability is a stored XSS in the plugin’s shortcode [advanced_iframe], caused by insufficient input sanitization and output escaping of user-supplied attributes. It requires authenticated access (contributor level or higher) and ...
CVE-2023-51690
CVE-2023-51690 affects the WordPress WordPress Advanced iFrame plugin. The vulnerability is an Improper Neutralization of Input During Web Page Generation, i.e., a Stored Cross-Site Scripting (XSS) issue in the plugin’s input handling. Affected versions are