If-So

4 CVEs across 2 If-So products. Browse If-So vulnerabilities, severities, and proof-of-concept exploits.

If-So products with known CVEs

ProductCVEs
Dynamic Content Personalization2
If-So2
If-So CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-5440Medium5.42025-05-15The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them…
CVE-2024-6070Medium4.82024-07-13The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its settings, which could allow high privilege u…
CVE-2024-5713Medium5.42024-07-13The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an…
CVE-2023-51492Medium6.52024-02-10Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows…