Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: PixelYourSite Component: Pixelyoursite Pro Clear all filters
TI-2023-02414 CVE-2023-2584 · GHSA-xg2q-52m6-9g8j

PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 23

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 (9.6.1 in the Pro version) due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2023-06-09 No fix listed CWE-79