cipherdevgroup vulnerabilities (CVE)

CVE records published for cipherdevgroup, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2024-5667 1 year ago

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library

cipherdevgroup WP Featherlight – A Simple jQuery Lightbox; dfactory Responsive Lightbox & Gallery

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Featherlight.js JavaScript library (versions 1.7.13 to 1.7.14) in various versions due to insufficient input sanitization and output escaping on user supplie…