Search Results (62 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-1910 1 Averta 1 Shortcodes And Extra Features For Phlox Theme 2024-11-21 6.1 Medium
The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
CVE-2018-20368 1 Averta 1 Master Slider 2024-11-21 N/A
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.