Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-1069 1 Really-simple-plugins 1 Complianz 2025-02-18 5.4 Medium
The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVE-2023-35089 1 Really-simple-plugins 1 Recipe Maker For Your Food Blog From Zip Recipes 2024-11-21 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.
CVE-2023-31076 1 Really-simple-plugins 1 Recipe Maker For Your Food Blog From Zip Recipes 2024-11-21 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions.
CVE-2022-0193 1 Really-simple-plugins 1 Complianz 2024-11-21 6.1 Medium
The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting