Skip to content
OpenAdvisories

Product · StoreApps

News Announcement Scroll

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-5663

    News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode

    The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing …

    StoreApps News Announcement Scroll Web / CMS