Vulnerabilities > Simple Banner Project > Simple Banner > 2.11.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-06 | CVE-2022-2515 | Cross-site Scripting vulnerability in Simple Banner Project Simple Banner The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `pro_version_activation_code` parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. | 5.4 |