Vulnerabilities

TI-2024-10573 CVE-2024-11410 · GHSA-wchw-pg72-3f4v

Cross-site scripting in Sharabindu Yoo Bar – Floating Notification & Promo Bar for Website

LOW 28

The Top and footer bars for announcements, notifications, advertisements, promotions – YooBar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Yoo Bar settings in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0036 Published 2024-12-12 No fix listed CWE-79

TI-2024-21447 CVE-2024-32560 · GHSA-fqqv-5qhq-7fgf

WordPress QR Code Composer plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sharabindu QR Code Composer allows Stored XSS.This issue affects QR Code Composer: from n/a through 2.0.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00312 Published 2024-04-18 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting in Sharabindu Yoo Bar – Floating Notification & Promo Bar for Website

WordPress QR Code Composer plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability