Data443

Inline Related Posts

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-47604

  • EPSS 0.14%
  • Veröffentlicht 07.05.2025 14:20:27
  • Zuletzt bearbeitet 08.05.2025 14:39:09

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Inline Related Posts allows Stored XSS. This issue affects Inline Related Posts: from n/a through 3.8.0.

5.9

CVE-2024-6487

Exploit
  • EPSS 0.15%
  • Veröffentlicht 29.07.2024 06:15:02
  • Zuletzt bearbeitet 30.05.2025 16:55:49

The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is ...

6.1

CVE-2024-5626

Exploit
  • EPSS 0.13%
  • Veröffentlicht 12.07.2024 06:15:04
  • Zuletzt bearbeitet 21.11.2024 09:48:02

The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

4.3

CVE-2024-31426

  • EPSS 0.16%
  • Veröffentlicht 15.04.2024 10:15:09
  • Zuletzt bearbeitet 21.11.2024 09:13:30

Cross-Site Request Forgery (CSRF) vulnerability in Data443 Inline Related Posts.This issue affects Inline Related Posts: from n/a through 3.3.1.

4.3

CVE-2023-6257

Exploit
  • EPSS 0.17%
  • Veröffentlicht 11.04.2024 05:15:47
  • Zuletzt bearbeitet 09.05.2025 13:38:51

The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the posts displayed, allowing any authenticated user, such as subscriber to retrieve the content ...

4.8

CVE-2024-2444

Exploit
  • EPSS 0.2%
  • Veröffentlicht 06.04.2024 05:15:07
  • Zuletzt bearbeitet 08.05.2025 16:41:25

The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed