templatesnext_toolkit Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/templatesnext_toolkit/ Thu, 23 Feb 2023 05:21:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png templatesnext_toolkit Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/templatesnext_toolkit/ 32 32 CVE-2022-4678 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4678/ Thu, 23 Feb 2023 05:21:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4678/ The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The post CVE-2022-4678 appeared first on CVE Vulnerability.

]]> The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The post CVE-2022-4678 appeared first on CVE Vulnerability.

]]> CVE-2023-0333 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0333/ Wed, 22 Feb 2023 14:02:13 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0333 The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

The post CVE-2023-0333 appeared first on CVE Vulnerability.

]]> The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

The post CVE-2023-0333 appeared first on CVE Vulnerability.

]]>