Filtered by vendor Marcomilesi Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-47245 1 Marcomilesi 1 Anac Xml Viewer 2024-12-18 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions.
CVE-2024-22291 1 Marcomilesi 1 Browser Theme Color 2024-11-21 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3.
CVE-2023-47656 1 Marcomilesi 1 Anac Xml Bandi Di Gara 2024-11-21 5.9 Medium
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.
CVE-2023-47242 1 Marcomilesi 1 Anac Xml Bandi Di Gara 2024-11-21 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.
CVE-2023-45651 1 Marcomilesi 1 Wp Attachments 2024-11-21 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11.
CVE-2022-4330 1 Marcomilesi 1 Wp Attachments 2024-11-21 4.8 Medium
The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVE-2022-3469 1 Marcomilesi 1 Wp Attachments 2024-11-21 4.8 Medium
The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).