Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ifso Component: Dynamic Content Personalization Clear all filters
TI-2024-05056 CVE-2024-5440 · GHSA-559f-7rvx-wm9p

If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS

Priority MEDIUM 58

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 1.8.0.3 CWE-79
TI-2023-28144 CVE-2023-51492 · GHSA-7rxr-hv3w-h99r

WordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personal…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-10 No fix listed CWE-79