Vulnerabilities

TI-2024-28834 CVE-2024-43163 · GHSA-3jf5-fxfr-q6hw

WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Parcel Panel ParcelPanel allows Reflected XSS.This issue affects ParcelPanel: from n/a through 4.3.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00306 Published 2024-08-12 No fix listed CWE-79

TI-2024-22747 CVE-2024-34412 · GHSA-rgrm-rq44-w47f

WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Parcel Panel ParcelPanel.This issue affects ParcelPanel: from n/a through 3.8.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00517 Published 2024-05-06 No fix listed CWE-89

Vulnerabilities

Filters

WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability