Malcolm-Oph Stageshow
2 CVEs affecting Malcolm-Oph Stageshow. Latest disclosed: 2025-06-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5703 | Medium | 6.4 | 2025-06-06 | The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versions up to, and including, 10.0.3 due to… |
CVE-2024-13705 | Medium | 6.1 | 2025-01-30 | The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL i… |