Vulnerabilities

TI-2023-05294 CVE-2023-5756 · GHSA-fx7w-7j3g-qr6h

Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action

LOW 38

The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00272 Published 2023-12-09 No fix listed CWE-352

TI-2022-02200 CVE-2022-2384 · GHSA-xxx4-63qf-8v87

Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting

LOW 23

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00622 Published 2022-08-15 Fixed in 1.7.4 CWE-79

Vulnerabilities

Filters

Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action

Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting