Skip to content
OpenAdvisories

Vendor

WP Songbook

1 known vulnerabilities.

Products

WP Songbook 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2021-34655

    WP Songbook <= 2.0.11 Reflected Cross-Site Scripting

    The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the ~/inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11.

    WP Songbook WP Songbook Web / CMS