CVE-2024-1846

CVE-2024-1846 affects the WordPress plugin “Responsive Tabs” (versions before 4.0.7). The issue is a lack of validation/escaping of shortcode attributes, leading to Stored XSS when the shortcode is rendered in a post/page. The root cause is improper handling of attributes in the plugin’s output. ...

CVE-2021-36893

CVE-2021-36893 affects the WordPress plugin Responsive Tabs up to version 4.0.5. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) in which an author or higher-privilege user can inject JavaScript, with the plugin failing to sanitize/escape certain parameters. Practical impa...

CVE-2024-4096

CVE-2024-4096 affects the WordPress plugin Responsive Tabs (versions up to 4.0.8). The vulnerability is aStored Cross-Site Scripting (XSS) caused by insufficient sanitization/escaping of certain Tab settings, potentially enabling a high-privilege user (Contributor+) to inject scripts. Public deta...