Vulnerabilities > Averta > Shortcodes AND Extra Features FOR Phlox Theme > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-14	CVE-2023-50368	Cross-site Scripting vulnerability in Averta Shortcodes and Extra Features for Phlox Theme Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes and extra features for Phlox theme allows Stored XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.2. network low complexity averta CWE-79	5.4
2022-07-11	CVE-2022-1910	Unspecified vulnerability in Averta Shortcodes and Extra Features for Phlox Theme The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting network low complexity averta	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.