Vulnerabilities > Boxystudio
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-12 | CVE-2022-3900 | Unspecified vulnerability in Boxystudio Cooked 1.7.5.6 The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability. | 9.8 |
| 2021-04-22 | CVE-2021-24233 | Unspecified vulnerability in Boxystudio Cooked The Cooked Pro WordPress plugin before 1.7.5.6 was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute. | 6.1 |