Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Peter Shaw Clear all filters
TI-2024-08556 CVE-2024-9220 · GHSA-fcff-4m68-vv98

LH Copy Media File <= 1.08 - Reflected Cross-Site Scripting

Priority LOW 27

The LH Copy Media File plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.08.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-10-01 No fix listed CWE-79
TI-2024-21420 CVE-2024-32533 · GHSA-jmjj-h682-vmmh

WordPress LH Add Media From Url plugin <= 1.22 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Add Media From Url allows Reflected XSS.This issue affects LH Add Media From Url: from n/a through 1.22.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-04-17 No fix listed CWE-79