Skip to content
OpenAdvisories

Vendor

avalex

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    WordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in avalex avalex avalex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects avalex: from n/a through <= 3.1.3.

  • Medium 5.9

    WordPress avalex Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions.