Skip to content
OpenAdvisories

Vendor

bannersky

10 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 6.5

    WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions.

  • Medium 5.3

    WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through <= 3.7.2.

  • Medium 5.5

    BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload

    The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke…

  • Medium 6.4

    BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. Th…