Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Infornweb Subscribe
Filtered by product News \& Blog Designer Pack
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-4792 1 Infornweb 1 News \& Blog Designer Pack 2023-02-06 N/A 5.4 MEDIUM
The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.