Skip to content
OpenAdvisories

Product · giuliopanda

ADFO – Custom data in admin dashboard

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-13390

    ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adfo_list' shortcode in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping on user s…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS
  • Medium 6.1
    CVE-2024-4104

    ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dbp_id' parameter in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it pos…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS
  • Medium 4.3
    CVE-2024-4103

    ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.0. This is due to missing or incorrect nonce validation on several functions hooked via the controller() funct…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS