Vendor archive

tonjoostudio CVEs

Beta · best-effort

3 CVEs tagged to vendor tonjoostudio — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2016-10975

Published Sep 17, 2019

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2016-10974

Published Sep 17, 2019

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2018-5311

Published Jan 9, 2018

The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1