Non notée
CVE-2021-24517 The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of…
Description
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the unfiltered_html capability is disallowed
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Stop Spammers Security | Block Spam Users, Comments, Forms 2021.18 | premières → < 2021.18 | 2021.18 |
Autres CVE de Stop Spammers Security | Block Spam Users, Comments, Forms
Les 4 CVE de Stop Spammers Security | Block Spam Users, Comments, Forms →
CVE-2023-2488
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape…
6.1
Moyenne
CVE-2023-2489
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape…
4.8
Moyenne
CVE-2022-4120
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user…
9.8
Critique