Vulnerabilities > Blog IN Blog Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-31 | CVE-2023-2435 | Path Traversal vulnerability in Blog-In-Blog Project Blog-In-Blog 1.1.1 The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.1 via a shortcode attribute. | 7.2 |
| 2023-05-31 | CVE-2023-2436 | Cross-site Scripting vulnerability in Blog-In-Blog Project Blog-In-Blog 1.1.1 The Blog-in-Blog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blog_in_blog' shortcode in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. | 4.8 |