Leevio vulnerabilities (CVE)

CVE records published for Leevio, newest first. Follow to get an email when a new one appears.

4 results
6.4Medium
CVE-2024-5647

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

blossomthemes BlossomThemes Social Feed; sayful Carousel Slider; divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder; robosoft Robo Gallery – Photo & Image Slider

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This make…