Extendthemes Materialis Companion
2 CVEs affecting Extendthemes Materialis Companion. Latest disclosed: 2024-06-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4707 | Medium | 6.4 | 2024-06-06 | The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcode in all versions u… |
CVE-2022-4762 | Medium | 5.4 | 2023-02-06 | The Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes before outputting them back in the page… |