Skip to content
OpenAdvisories

Vendor

top-position

1 known vulnerabilities.

Products

Top Position Google Finance 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-13895

    Top Position Google Finance <= 0.1.0 - Reflected Cross-Site Scripting

    The Top Position Google Finance plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping. This makes it …

    top-position Top Position Google Finance Web / CMS