Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: bannersky Component: Bsk Pdf Manager Clear all filters
TI-2023-04699 CVE-2023-5110 · GHSA-r893-9m69-jch8

BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00525 Published 2023-10-24 No fix listed CWE-79
TI-2021-07142 CVE-2021-24860 · GHSA-3v4q-ppc4-rfgv

BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

Priority LOW 34

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01317 Published 2021-11-29 Fixed in 3.1.2 CWE-89
TI-2014-04062 CVE-2014-4944 · GHSA-cwh2-4vj6-47c7

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF…

Priority LOW 35

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03553 Published 2014-07-14 No fix listed CWE-89