Skip to content
OpenAdvisories

Vendor

nuknightlab

2 known vulnerabilities.

Products

TimelineJS3 1 Knight Lab Timeline 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2024-2287

    Knight Lab Timeline <= 3.9.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    nuknightlab Knight Lab Timeline Web / CMS