6.3
Moyenne
CVE-2024-0905 The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it…
Description
The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against unauthenticated and admin-level users
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fancy Product Designer 6.1 | premières → < 6.1.8 | 6.1.8 |
| fancy_product_designer 6.1 | premières → < 6.1.8 | 6.1.8 |
Autres CVE de Fancy Product Designer
Les 7 CVE de Fancy Product Designer →
CVE-2024-0904
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
5.9
Moyenne
CVE-2024-0902
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
4.3
Moyenne
CVE-2024-0365
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before…
6.5
Moyenne
CVE-2021-4334
The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a…
8.8
Élevée