CVE Vulnerability Catalog

Oct8ne Chatbot v2.3 has a Stored XSS vulnerability that allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript sent by email. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through /Records/SendSummaryMail.

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rprogress' shortcode in versions up to and including 1.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The SM CountDown Widget plugin for WordPress up to version 1.2 is vulnerable to Stored Cross-Site Scripting via the smcountdown shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The ST Categories Widget plugin for WordPress up to version 1.0.0 is vulnerable to Stored Cross-Site Scripting via the st-categories shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Material Design Iconic Font Integration plugin for WordPress up to version 2 is vulnerable to Stored Cross-Site Scripting via the 'mdiconic' shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Simple Business Data plugin for WordPress up to version 1.0.1 is vulnerable to Stored Cross-Site Scripting via 'simple_business_data' shortcode attributes. The plugin fails to properly sanitize user input or escape output when embedding the 'type' attribute into the 'class' attribute, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The Bg Book Publisher plugin for WordPress up to version 1.25 is vulnerable to Stored Cross-Site Scripting via the 'book_author' post meta rendered through the '[book_author]' shortcode. The plugin fails to properly escape the meta value before output, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The Photographers galleries plugin for WordPress up to version 1.1.8 is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes (e.g., 'w', 'h', 'raw_css', 'look'). The plugin fails to properly sanitize user input or escape output when inserting these values into HTML attributes and inline styles, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The WP AD Gallery plugin for WordPress up to version 1.3 is vulnerable to Stored Cross-Site Scripting via the 'startindex' parameter of the ad-gallery shortcode. The plugin fails to properly sanitize input and escape output, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The WP Restaurant Listings plugin for WordPress up to version 1.0.2 is vulnerable to Stored Cross-Site Scripting via the 'align' parameter of the restaurant_summary shortcode. The plugin fails to properly sanitize input and escape output, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The Oboxmedia Ads plugin for WordPress (all versions up to and including 1.9.8) is vulnerable to Stored Cross-Site Scripting via the 'before_widget' and 'after_widget' parameters of the oboxads-ad-widget shortcode. This is due to insufficient input sanitization and output escaping.

The Playerzbr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'urlmeta' post meta field in all versions up to and including 1.6. This is due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgrid_skin_content' post meta field in all versions up to and including 1.2.1 due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or above can inject arbitrary web scripts that execute whenever a user accesses the injected page.

The WP-Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'roboshot' shortcode in all versions up to and including 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The WP Responsive Meet The Team plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wprm_team' shortcode in all versions up to and including 1.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to and including 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Responsive iframe GoogleMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive_map' shortcode in all versions up to and including 1.0.2. This is due to insufficient input sanitization and output escaping on the 'width' and 'height' attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Simple Youtube Shortcode plugin for WordPress up to version 1.1.3 is vulnerable to Stored Cross-Site Scripting via the 'embed_youtube' shortcode. Insufficient input sanitization and output escaping on the 'id' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Print Button Shortcode plugin for WordPress up to version 1.0.1 is vulnerable to Stored Cross-Site Scripting via the 'print-button' shortcode. Insufficient input sanitization and output escaping on the 'target' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The WP-Force Images Download plugin for WordPress up to version 1.8 is vulnerable to Stored Cross-Site Scripting via the 'wpfid' shortcode. Insufficient input sanitization and output escaping on the 'class' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.