Skip to content
OpenAdvisories

Vendor

malcolm-oph

2 known vulnerabilities.

Products

StageShow 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-5703

    StageShow <= 10.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor Parameter

    The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versions up to, and including, 10.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attack…

    malcolm-oph StageShow Web / CMS
  • Medium 6.1
    CVE-2024-13705

    StageShow <= 9.8.6 - Reflected Cross-Site Scripting

    The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8.6. This makes it possible for unauthenticated attackers to …

    malcolm-oph StageShow Web / CMS