CVE-2025-14814
- EPSS 0.16%
- Veröffentlicht 25.09.2026 03:38:44
- Zuletzt bearbeitet 25.09.2026 14:17:12
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and including, 12.0.6 due to insufficient input sanitization and output escaping on user suppli...
CVE-2025-13533
- EPSS 0.2%
- Veröffentlicht 18.09.2026 08:28:31
- Zuletzt bearbeitet 18.09.2026 15:17:04
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment Engine fields. This is due to insufficient input sanitization and output escaping on assign...
CVE-2025-11928
- EPSS 0.18%
- Veröffentlicht 01.11.2025 03:34:36
- Zuletzt bearbeitet 15.04.2026 00:35:42
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for auth...
CVE-2025-3703
- EPSS 0.48%
- Veröffentlicht 14.08.2025 10:34:37
- Zuletzt bearbeitet 23.04.2026 15:29:52
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript ...