6.1
Moyenne
CVE-2024-6020 The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the…
Description
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sign-up Sheets 2.2 | premières → < 2.2.13 | 2.2.13 |
| sign-up_sheets 2.2 | premières → < 2.2.13 | 2.2.13 |
Autres CVE de Sign-up Sheets
Les 4 CVE de Sign-up Sheets →
CVE-2026-92410
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up…
4.3
Moyenne
CVE-2021-24441
The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating…
Non notée
CVE-2021-24440
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new…
Non notée