Rockcontent Rock Convert
3 CVEs affecting Rockcontent Rock Convert. Latest disclosed: 2022-11-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3440 | Medium | 6.1 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present… |
CVE-2022-36428 | Medium | 4.8 | 2022-11-03 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress. |
CVE-2022-3441 | Medium | 4.8 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |