A17lab Wpstickybar
2 CVEs affecting A17lab Wpstickybar. Latest disclosed: 2024-07-30. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5765 | Critical | 9.8 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availab… |
CVE-2024-6226 | Medium | 6.1 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Si… |