Vulnerabilities > Realfavicongenerator
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-06 | CVE-2015-10116 | Cross-Site Request Forgery (CSRF) vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. | 8.8 |
| 2022-04-11 | CVE-2022-0471 | Cross-site Scripting vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue | 4.3 |
| 2021-08-30 | CVE-2021-24437 | Cross-site Scripting vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator. | 4.3 |