Skip to content
OpenAdvisories

Vendor

milmor

5 known vulnerabilities.

Products

Amministrazione Trasparente 2 WP Attachments 1 WP SPID Italia 1 Telegram Bot & Channel 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-13068

    Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username

    The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    milmor Telegram Bot & Channel Web / CMS