Vulnerabilities > Realfavicongenerator

DATE CVE VULNERABILITY TITLE RISK
2023-06-06 CVE-2015-10116 Unspecified vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator
A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress.
network
low complexity
realfavicongenerator
8.8
2022-04-11 CVE-2022-0471 Unspecified vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator
The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue
network
low complexity
realfavicongenerator
6.1
2021-08-30 CVE-2021-24437 Unspecified vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator
The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.
network
low complexity
realfavicongenerator
6.1