Vulnerabilities

TI-2023-05207 CVE-2023-5663 · GHSA-xr8x-4f65-m34g

News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode

MEDIUM 41

The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00773 Published 2024-03-13 No fix listed CWE-89

TI-2022-19329 CVE-2022-40694 · GHSA-vq7w-xcgj-5h82

WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

LOW 22

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00433 Published 2022-11-17 No fix listed CWE-79

Vulnerabilities

Filters

News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode

WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability