Sedlex Simple Quotation
2 CVEs affecting Sedlex Simple Quotation. Latest disclosed: 2022-03-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22735 | High | 8.8 | 2022-03-14 | The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of use… |
CVE-2022-22734 | Medium | 6.1 | 2022-03-14 | The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a res… |