Vulnerabilities > Motopress > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-11-01 | CVE-2021-24722 | Cross-site Scripting vulnerability in Motopress Restaurant Menu 2.4.0 The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed | 3.5 |
| 2021-10-25 | CVE-2021-24544 | Cross-site Scripting vulnerability in Motopress Motopress-Slider-Lite The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options, allowing Cross-Site Scripting payloads to be set in them. | 3.5 |
| 2021-09-13 | CVE-2021-24724 | Cross-site Scripting vulnerability in Motopress Timetable and Event Schedule The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s | 3.5 |