Skip to content
OpenAdvisories

Product · CrestaProject

Attesa Extra

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-62971

    WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through <= 1.4.7.

    CrestaProject Attesa Extra
  • Medium 4.3
    CVE-2024-10688

    Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure

    The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2 via the 'attesa-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticat…

    CrestaProject Attesa Extra Web / CMS