Skip to content
OpenAdvisories

Vendor

Marcel Pol

3 known vulnerabilities.

Products

Gwolle Guestbook 1 Zeno Font Resizer 1 Elo Rating Shortcode 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-51678

    WordPress Elo Rating Shortcode plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Elo Rating Shortcode elo-rating-shortcode allows Stored XSS.This issue affects Elo Rating Shortcode: from n/a through <= 1.0.3.

    Marcel Pol Elo Rating Shortcode
  • Medium 5.9
    CVE-2023-25442

    WordPress Zeno Font Resizer Plugin <= 1.7.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Marcel Pol Zeno Font Resizer plugin <= 1.7.9 versions.

    Marcel Pol Zeno Font Resizer