Skip to content
OpenAdvisories

Product · paulrosen

ABC Notation

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-31895

    WordPress ABC Notation Plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through <= 6.1.3.

    paulrosen ABC Notation
  • Medium 6.5
    CVE-2024-13550

    ABC Notation <= 6.1.3 - Authenticated (Contributor+) Arbitrary File Read

    The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'abcjs' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, t…

    paulrosen ABC Notation Web / CMS
  • Medium 6.4
    CVE-2024-13551

    ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' shortcode in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This make…

    paulrosen ABC Notation Web / CMS