If-so

Dynamic Content Personalization

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-58602

  • EPSS 0.03%
  • Veröffentlicht 03.09.2025 14:36:40
  • Zuletzt bearbeitet 04.09.2025 15:35:29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IfSo Dynamic Content If-So Dynamic Content Personalization allows Stored XSS. This issue affects If-So Dynamic Content Personalization: from n/a thr...

6.5

CVE-2025-49875

  • EPSS 0.04%
  • Veröffentlicht 17.06.2025 15:01:15
  • Zuletzt bearbeitet 17.06.2025 20:50:23

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IfSo Dynamic Content If-So Dynamic Content Personalization allows Stored XSS. This issue affects If-So Dynamic Content Personalization: from n/a thr...

5.4

CVE-2024-5440

Exploit
  • EPSS 0.05%
  • Veröffentlicht 15.05.2025 20:15:54
  • Zuletzt bearbeitet 11.06.2025 16:08:04

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contribu...

5.4

CVE-2024-5713

Exploit
  • EPSS 0.22%
  • Veröffentlicht 13.07.2024 06:15:05
  • Zuletzt bearbeitet 20.05.2025 18:19:40

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

4.8

CVE-2024-6070

Exploit
  • EPSS 0.32%
  • Veröffentlicht 13.07.2024 06:15:05
  • Zuletzt bearbeitet 16.05.2025 13:21:02

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_...

5.4

CVE-2023-51492

  • EPSS 0.07%
  • Veröffentlicht 10.02.2024 09:15:08
  • Zuletzt bearbeitet 21.11.2024 08:38:14

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6....