Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Mpembed Component: Wp Matterport Shortcode Clear all filters
TI-2023-03965 CVE-2023-4289 · GHSA-hg5g-m3rr-7xx2

WP Matterport Shortcode < 2.1.8 - Contributor+ Stored XSS via shortcode

Priority MEDIUM 58

The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users wit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-10-16 Fixed in 2.1.8
TI-2023-03966 CVE-2023-4290 · GHSA-gx5h-6g66-6r78

WP Matterport Shortcode < 2.1.7 - Reflected XSS

Priority MEDIUM 60

The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-10-16 Fixed in 2.1.7