Jeff Starr Prismatic
2 CVEs affecting Jeff Starr Prismatic. Latest disclosed: 2021-07-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24409 | Medium | 6.1 | 2021-07-12 | The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site… |
CVE-2021-24408 | Medium | 5.4 | 2021-07-12 | The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to s… |