Skip to content
OpenAdvisories

Vendor

brandonfire

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.4

    Payment Page | Payment Form for Stripe <= 1.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'pricing_plan_select_text_font_family' Parameter

    The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricing_plan_select_text_font_family' parameter in all versions up to, and including, 1.4.6 due to insufficient input sanitization and output…

  • Medium 5.5

    brandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injection

    A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the function __construct/select_single_rna/count_rna of the file inc/model.php. The manipulation leads to sql injection. The pat…