Vulnerabilities

TI-2023-09996 CVE-2023-24374 · GHSA-8jxp-w6hg-6p74

WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-04-06 No fix listed CWE-79

TI-2023-10004 CVE-2023-24382 · GHSA-5mjw-jcv9-j39q

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2023-02-14 No fix listed CWE-352