Skip to content
OpenAdvisories

Vendor

endortrails

2 known vulnerabilities.

Products

Sell Media 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-11777

    Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Sell Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sell_media_search_form_gutenberg' shortcode in all versions up to, and including, 2.5.8.5 due to insufficient input sanitization and output escaping on user sup…

    endortrails Sell Media Web / CMS
  • Medium 4.3
    CVE-2021-4420

    Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass

    The Sell Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.5. This is due to missing or incorrect nonce validation on the sell_media_process() function. This makes it possible for unauthenticated atta…

    endortrails Sell Media Web / CMS