Vulnerabilities > Getlasso > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-30 | CVE-2023-40674 | Unspecified vulnerability in Getlasso Simple Urls Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management: from n/a through 118. | 5.4 |
| 2023-09-27 | CVE-2023-40667 | Unspecified vulnerability in Getlasso Simple Urls Unauth. | 6.1 |
| 2023-02-13 | CVE-2023-0099 | Unspecified vulnerability in Getlasso Simple Urls The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | 6.1 |