Codelights-Shortcodes-And-Widgets Project Codelights-Shortcodes-And-Widgets
2 CVEs affecting Codelights-Shortcodes-And-Widgets Project Codelights-Shortcodes-And-Widgets. Latest disclosed: 2023-01-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4619 | Medium | 5.5 | 2022-12-20 | The Sidebar Widgets by CodeLights plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Extra CSS class’ parameter in versions up to, and… |
CVE-2022-4460 | Medium | 5.4 | 2023-01-16 | The Sidebar Widgets by CodeLights WordPress plugin through 1.4 does not validate and escape some of its shortcode attributes before outputting them back in the… |