Skip to content
OpenAdvisories

Vendor

demonisblack

4 known vulnerabilities.

Products

demon image annotation 3 Scoreboard for HTML5 Games Lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4083

    Scoreboard for HTML5 Games Lite <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2. The shortcode function sfhg_shortcode() allows arbitrary HTML attributes to be adde…

    demonisblack Scoreboard for HTML5 Games Lite Web / CMS
  • Medium 6.5
    CVE-2022-4171

    demon image annotation <= 5.0 - Improper Input Restriction Validation

    The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a setti…

    demonisblack demon image annotation Web / CMS