Agilelogix Store Locator
4 CVEs affecting Agilelogix Store Locator. Latest disclosed: 2023-09-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4151 | Medium | 6.1 | 2023-09-04 | The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Refl… |
CVE-2022-41615 | Medium | 6.1 | 2022-11-18 | Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress. |
CVE-2023-27618 | Medium | 5.9 | 2023-06-22 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin <= 1.4.9 versions. |
CVE-2022-4832 | Medium | 5.4 | 2023-01-23 | The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which co… |