Skip to content
OpenAdvisories

Vendor

mgibbs189

7 known vulnerabilities.

Products

Custom Field Suite 6 Log HTTP Requests 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-3558

    Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]

    The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_title]' parameter versions up to, and including, 2.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authen…

    mgibbs189 Custom Field Suite Web / CMS
  • Medium 6.4
    CVE-2024-3559

    Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]

    The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_content]' parameter versions up to, and including, 2.6.7 due to insufficient input sanitization and output escaping. This makes it possible for auth…

    mgibbs189 Custom Field Suite Web / CMS
  • Medium 4.4
    CVE-2024-3068

    Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cfs[fields][*][name]' parameter in all versions up to, and including, 2.6.5 due to insufficient input sanitization and output escaping. This makes it possible fo…

    mgibbs189 Custom Field Suite Web / CMS
  • Medium 4.4
    CVE-2024-0689

    Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a meta import in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the meta values. This makes it possible for au…

    mgibbs189 Custom Field Suite Web / CMS
  • Medium 6.1
    CVE-2022-3402

    Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting

    The Log HTTP Requests plugin for WordPress is vulnerable to Stored Cross-Site Scripting via logged HTTP requests in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att…

    mgibbs189 Log HTTP Requests Web / CMS