colorlibplugins FancyBox for WordPress güvenlik açıkları (CVE)

colorlibplugins FancyBox for WordPress için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
6.4Orta
CVE-2024-5020

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

extendthemes Colibri Page Builder; smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More; bqworks Accordion Slider; 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attribu…

4.4Orta
CVE-2024-0662
colorlibplugins FancyBox for WordPress

The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with adm…