colorlibplugins FancyBox for WordPress Schwachstellen (CVE)

Für colorlibplugins FancyBox for WordPress veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

6.4Mittel

CVE-2024-5020 vor 1 Jahr

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

extendthemes Colibri Page Builder; smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More; bqworks Accordion Slider; 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attribu…

4.4Mittel

CVE-2024-0662 vor 2 Jahren

colorlibplugins FancyBox for WordPress

The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with adm…