Vulnerabilities > Realfavicongenerator > Favicon BY Realfavicongenerator > 1.3.13

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-0471 Unspecified vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator
The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue
network
low complexity
realfavicongenerator
6.1
2021-08-30 CVE-2021-24437 Unspecified vulnerability in Realfavicongenerator Favicon BY Realfavicongenerator
The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.
network
low complexity
realfavicongenerator
6.1