Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Partitionnumerique Clear all filters
TI-2024-12709 CVE-2024-13670 · GHSA-v77j-58w9-v6v7

Music Sheet Viewer <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Music Sheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pn_msv' shortcode in all versions up to, and including, 4.1 due to insufficient input sanitization and output esc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00226 Published 2025-01-30 No fix listed CWE-79
TI-2024-12710 CVE-2024-13671 · GHSA-p7c3-fj7j-p7ww

Music Sheet Viewer <= 4.1 - Unauthenticated Arbitrary File Read

Priority MEDIUM 40

The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00548 Published 2025-01-30 No fix listed CWE-22