WordPress Plugin Vulnerabilities

Page Showcaser Boxes - Title Field Stored XSS

Description

The page-showcaser-boxes WordPress plugin was affected by a Title Field Stored XSS security vulnerability.

Affects Plugins

Plugin icon
page-showcaser-boxes
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
8f5bf7ec-9229-4494-ad80-667ebd134ab3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-11-03
Title
Image Hover Effects Css3 <= 4.5 - Admin+ Stored XSS
Published
2023-01-17
Title
Responsive Gallery Grid < 2.3.9 - Contributor+ Stored XSS
Published
2023-09-08
Title
Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries
Published
2024-04-25
Title
Newsletter Popup <= 1.2 - Admin+ Stored XSS
Published
2025-11-24
Title
Telegram Bot & Channel < 4.1.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username