Skip to content
OpenAdvisories

Vendor

jobair

2 known vulnerabilities.

Products

JB Horizontal Scroller News Ticker 1 JB News Ticker 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-11804

    JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping. Th…

    jobair JB News Ticker Web / CMS
  • Medium 6.5
    CVE-2025-23830

    WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from…

    jobair JB Horizontal Scroller News Ticker