CWE-79

CVE-2019-14947

February 26, 2023 by

The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.

February 26, 2023 by

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

February 26, 2023 by

The wp-database-backup plugin before 5.1.2 for WordPress has XSS.

February 26, 2023 by

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

February 26, 2023 by

JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.

February 26, 2023 by

JetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when using the Firefox browser.