plugin-planet user submitted posts vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a up to and including 2...

Plugin-planet User Submitted Posts

1 Github repository

9.8

CVSSv3

The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the usp_check_images function in versions up to, and including, 20190312. This makes it possible for unauthenticated malicious users to upload arbitrary fi...

Plugin-planet User Submitted Posts

5.4

CVSSv3

The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [usp_gallery] shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like 'be...

Plugin-planet User Submitted Posts

5.4

CVSSv3

The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in versions up to, and including, 20230809 due to insufficient input sanitization and output escaping. This makes it possible for unau...

Plugin-planet User Submitted Posts

6.1

CVSSv3

The user-submitted-posts plugin prior to 20160215 for WordPress has XSS via the user-submitted-content field.

Plugin-planet User Submitted Posts

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook