Skip to content
OpenAdvisories

Vendor

ajseidl

1 known vulnerabilities.

Products

AJS Footnotes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-15378

    AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Site Scripting

    The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note_list_class' and 'popup_display_effect_in' parameters in all versions up to, and including, 1.0 due to missing authorization and nonce verification on settings sa…

    ajseidl AJS Footnotes Web / CMS