CVSS: 6.4EPSS: 0%CPEs: 2EXPL: 0CVE-2024-10048 – Post Status Notifier Lite and Premium <= 1.11.6 - Reflected Cross-Site Scripting via page
https://notcve.org/view.php?id=CVE-2024-10048
28 Oct 2024 — The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.11.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Los complementos Post Status Notifier Lite y Premium para WordPress son... • https://plugins.trac.wordpress.org/changeset/3174969/post-status-notifier-lite/tags/1.11.7/lib/Psn/Admin/ListTable/Rules.php • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-47766 – WordPress Post Status Notifier Lite Plugin <= 1.11.0 is vulnerable to Cross Site Scripting (XSS)
https://notcve.org/view.php?id=CVE-2023-47766
14 Nov 2023 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Reith Post Status Notifier Lite plugin <= 1.11.0 versions. Vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web ('cross-site Scripting') en el complemento Timo Reith Post Status Notifier Lite en versiones <= 1.11.0. The Post Status Notifier Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.11.0 due ... • https://patchstack.com/database/vulnerability/post-status-notifier-lite/wordpress-post-status-notifier-lite-plugin-1-11-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1CVE-2022-4325 – Post Status Notifier Lite < 1.10.1 - Reflected XSS
https://notcve.org/view.php?id=CVE-2022-4325
20 Dec 2022 — The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high privilege users such as admin. The Post Status Notifier Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $controller parameter in versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthen... • https://wpscan.com/vulnerability/5b983c48-6b05-47cf-85cb-28bbeec17395 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •