Vendor
everviz
1 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 6.4
everviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The everviz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `everviz` shortcode attributes in versions up to, and including, 1.1. This is due to the plugin not properly sanitizing user input or escaping output when building a `<div i…