4.7
Moyenne
CVE-2024-1292 The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back…
Description
The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wpb-show-core 2.7 | premières → < 2.7 | 2.7 |
Autres CVE de wpb-show-core
Les 6 CVE de wpb-show-core →
CVE-2024-1956
The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in…
6.1
Moyenne
CVE-2024-1958
The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in…
4.8
Moyenne
CVE-2023-4922
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter
Non notée
CVE-2023-5974
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path`…
Non notée