Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Mongoosemarketplace Clear all filters
TI-2022-04273 CVE-2022-4675 · GHSA-g2qg-fxj7-jg27

Mongoose Page Plugin < 1.9.0 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Mongoose Page Plugin WordPress plugin before 1.9.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 1.9.0