WordPress Plugin Vulnerabilities

Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS

Description

The Code Embed WordPress plugin was affected by a wp-admin/admin.php suffix Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
simple-embed-code
Fixed in 2.0.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
e67f0634-9da8-437a-b42e-3cb641f3de75

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 8 years ago)

Other

Published
Title
Published
2021-08-23
Title
Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS
Published
2020-12-09
Title
DiveBook <= 1.1.4 - Unauthenticated Reflected XSS
Published
2010-11-05
Title
Vodpod Video Gallery <= 3.1.7 - Cross-Site Scripting (XSS)
Published
2022-06-17
Title
Dyslexiefont Free < 1.0.0 - Authenticated Cross-Site Scripting
Published
2023-02-20
Title
Video Background < 2.7.5 - Contributor+ Stored XSS via Shortcode