Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8
CVE-2023-4968
- EPSS 0.17%
- Published 20.10.2023 07:15:16
- Last modified 21.11.2024 08:36:21
The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
5.4
CVE-2021-25106
- EPSS 0.21%
- Published 07.02.2022 16:15:45
- Last modified 21.11.2024 05:54:21
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as ...
1