Mpembed Wp Matterport Shortcode
3 CVEs affecting Mpembed Wp Matterport Shortcode. Latest disclosed: 2023-10-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35094 | Medium | 6.5 | 2023-08-30 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin <= 2.1.4 versions. |
CVE-2023-4290 | Medium | 6.1 | 2023-10-16 | The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected C… |
CVE-2023-4289 | Medium | 5.4 | 2023-10-16 | The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/p… |