Vulnerabilities > Sajjadhsagor
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-18 | CVE-2024-9425 | Cross-site Scripting vulnerability in Sajjadhsagor Advanced Category and Custom Taxonomy Image The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2023-12-21 | CVE-2023-47527 | Cross-site Scripting vulnerability in Sajjadhsagor WP Edit Username Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5. | 5.4 |