Skip to content
OpenAdvisories

Vendor

Mark O’Donnell

7 known vulnerabilities.

Products

Team Rosters 3 MSTW League Manager 2 Coaching Staffs 1 MSTW CSV EXPORTER 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-34890

    WordPress MSTW League Manager plugin <= 2.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager allows DOM-Based XSS.This issue affects MSTW League Manager: from n/a through 2.10.

    Mark O’Donnell MSTW League Manager
  • Medium 5.3
    CVE-2025-62944

    WordPress MSTW CSV EXPORTER plugin <= 1.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MSTW CSV EXPORTER: from n/a through <= 1.4.

    Mark O’Donnell MSTW CSV EXPORTER
  • Medium 6.4
    CVE-2024-13663

    Coaching Staffs <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Coaching Staffs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstw-cs-table' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes…

    Mark O’Donnell Coaching Staffs Web / CMS
  • Medium 6.1
    CVE-2024-12320

    Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'

    The Team Rosters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated atta…

    Mark O’Donnell Team Rosters Web / CMS