Skip to content
OpenAdvisories

Product · fuzzoid

Easy 3D Viewer

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…