Custom Content Shortcode Project Custom Content Shortcode
5 CVEs affecting Custom Content Shortcode Project Custom Content Shortcode. Latest disclosed: 2023-03-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0340 | High | 8.8 | 2023-03-20 | The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate one of its shortcode attribute, which could allow users with a contributor role a… |
CVE-2023-0273 | Medium | 5.4 | 2023-03-20 | The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page… |
CVE-2021-24826 | Medium | 5.4 | 2022-03-07 | The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v < 4.0.1) or… |
CVE-2021-24825 | Medium | 4.3 | 2022-03-07 | The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ (v < 4.0.1)… |
CVE-2021-24824 | Medium | 4.3 | 2022-03-07 | The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, t… |