getshortcodes shortcodes_ultimate Schwachstellen (CVE)

Für getshortcodes shortcodes_ultimate veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

4 Ergebnisse
6.3Mittel
CVE-2024-3188

Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS

WP Shortcodes Plugin — Shortcodes Ultimate; getshortcodes shortcodes_ultimate

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor ro…

5.4Mittel
CVE-2024-2583

Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS

WP Shortcodes Plugin — Shortcodes Ultimate; getshortcodes shortcodes_ultimate

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.0.5 does not properly escape some of its shortcodes attributes before they are echoed back to users, making it possible for users with the contributor role to conduct Stored XSS attacks.