Aller au contenu
Se connecter
Non notée

CVE-2023-2272 The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it…

Description

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
Tiempo.com 0.1 premières → 0.1.2 Pas de correctif indiqué

Autres CVE de Tiempo.com

Les 3 CVE de Tiempo.com →
CVE-2023-0058 The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when creating and editing its shortcode, and is… Non notée CVE-2023-2271 The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow… Non notée
Suivre cette CVE