Antongorodezkiy Yadisk Files
2 CVEs affecting Antongorodezkiy Yadisk Files. Latest disclosed: 2024-11-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10709 | Medium | 6.8 | 2024-11-25 | The YaDisk Files WordPress plugin through 1.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where… |
CVE-2024-10710 | Low | 3.5 | 2024-11-25 | The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |