Wpreactions

Wp Reactions Lite

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-32587

  • EPSS 0.1%
  • Published 09.11.2023 22:15:10
  • Last modified 21.11.2024 08:03:39

Cross-Site Request Forgery (CSRF) vulnerability in WP Reactions, LLC WP Reactions Lite plugin <= 1.3.8 versions.

5.4

CVE-2021-24723

Exploit
  • EPSS 0.2%
  • Published 01.11.2021 09:15:09
  • Last modified 21.11.2024 05:53:38

The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.