Vulnerabilities > Stockdio

DATE CVE VULNERABILITY TITLE RISK
2023-09-29 CVE-2023-41666 Cross-site Scripting vulnerability in Stockdio Stock Quotes List
Auth.
network
low complexity
stockdio CWE-79
5.4
2021-01-19 CVE-2020-28707 Cross-site Scripting vulnerability in Stockdio Historical Chart
The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_chart_historical-wp.js in wp-content/plugins/stockdio-historical-chart/assets/ because the origin of a postMessage() event is not validated.
network
stockdio CWE-79
4.3