Skip to content
OpenAdvisories

Vendor

Mark O’Donnell

7 known vulnerabilities.

Products

Team Rosters 3 MSTW League Manager 2 Coaching Staffs 1 MSTW CSV EXPORTER 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-58852

    WordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Mark O'Donnell MSTW League Manager mstw-league-manager allows Stored XSS.This issue affects MSTW League Manager: from n/a through <= 2.10.

    Mark O’Donnell MSTW League Manager
  • High 7.1
    CVE-2025-31905

    WordPress Team Rosters Plugin <= 4.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O'Donnell Team Rosters team-rosters allows Reflected XSS.This issue affects Team Rosters: from n/a through <= 4.7.

    Mark O’Donnell Team Rosters