Skip to main content

Vendor/product archive

wpexperts / user_avatar-reloaded CVEs

Beta · best-effort

1 CVEs tagged to wpexperts / user_avatar-reloaded0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2023-4798

Published Oct 16, 2023

The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like co…

CVSS 5.4 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort
Showing 1-1 of 1 CVEsPage 1 of 1