WordPress Plugin Vulnerabilities

WP Cumulus < 1.22 - XSS

Description

The wp-cumulus WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
wp-cumulus
Fixed in 1.22

References

CVE
CVE-2009-4169

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
30ec83b8-c2f3-4c70-afd5-34f26012496d

Timeline

Publicly Published
2009-09-27 (about 16 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-03-07
Title
My Calendar < 3.4.24 - Authenticated Stored XSS
Published
2024-08-07
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-06-14
Title
WordPress Real Cookie Banner < 2.18.2 - Reflected Cross-Site Scripting
Published
2014-08-01
Title
Quick Page Post Redirect 5.0.4 - redirect-updates.php quickppr_redirects Parameter Stored XSS
Published
2023-11-03
Title
Comments Ratings <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting