Olevmedia Olevmedia Shortcodes
3 CVEs affecting Olevmedia Olevmedia Shortcodes. Latest disclosed: 2023-05-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25798 | Medium | 6.5 | 2023-05-03 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 versions. |
CVE-2015-9421 | Medium | 6.5 | 2019-09-26 | The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter. |
CVE-2023-0168 | Medium | 5.4 | 2023-02-27 | The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/pos… |