WordPress Plugin Vulnerabilities

CMS Tree Page View 1.2.31 - Multiple Parameter XSS

Description

The CMS Tree Page View WordPress plugin was affected by a Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
cms-tree-page-view
Fixed in 1.2.32

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
0f9de5a9-829d-4cff-b853-11b246319dbc

Timeline

Publicly Published
2015-04-21 (about 11 years ago)
Added
2015-04-27 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-01-27
Title
Price Table <= 0.2.2 - Contributor+ Stored Cross-Site Scripting
Published
2019-04-09
Title
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting (XSS)
Published
2025-12-15
Title
CC Child Pages < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode
Published
2025-10-02
Title
Auto Bulb Finder for WordPress < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-08-29
Title
Sliding Door <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting