WordPress Plugin Vulnerabilities

SyntaxHighlighter Evolved <= 3.1.9 - Unspecified Cross-Site Scripting (XSS)

Description

The SyntaxHighlighter Evolved WordPress plugin was affected by an Unspecified Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
syntaxhighlighter
Fixed in 3.1.10

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
04870de9-b902-497a-a32f-232faa60e05b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2025-03-31
Title
Simple Owl Carousel <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-03-20
Title
Ecover Builder For Dummies <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Published
2025-12-15
Title
Rencontre < 3.13.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2026-04-07
Title
WP Visitor Statistics (Real Time Traffic) < 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute
Published
2025-01-07
Title
아임포트 결제버튼 생성 플러그인 <= 1.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting