Flat Preloader Project

Flat Preloader

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2021-24789

Exploit
  • EPSS 0.21%
  • Veröffentlicht 01.11.2021 09:15:09
  • Zuletzt bearbeitet 21.11.2024 05:53:46

The Flat Preloader WordPress plugin before 1.5.5 does not escape some of its settings when outputting them in attribute in the frontend, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is d...

5.4

CVE-2021-24685

Exploit
  • EPSS 0.14%
  • Veröffentlicht 01.11.2021 09:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:33

The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in admin change them with a Cross-Site Scripting paylo...