Vulnerabilities

TI-2023-09469 CVE-2023-23641 · GHSA-r777-4879-hrqc

WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPmanage Uji Popup plugin <= 1.4.3 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-05-16 No fix listed CWE-79

TI-2022-03517 CVE-2022-3837 · GHSA-3pv7-h25w-9xp8

Uji Countdown < 2.3.1 - Admin+ Stored XSS

MEDIUM 55

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilte…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-05 Fixed in 2.3.1

TI-2016-08938 CVE-2016-10900 · GHSA-89x3-9fp9-3xgq

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

LOW 29

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-21 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Uji Countdown < 2.3.1 - Admin+ Stored XSS

The uji-countdown plugin before 2.0.7 for WordPress has XSS.