Vulnerabilities > Wedevs > WP Project Manager > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-14 CVE-2023-49860 Unspecified vulnerability in Wedevs WP Project Manager
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts allows Stored XSS.This issue affects WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts: from n/a through 2.6.7.
network
low complexity
wedevs
5.4
2022-04-04 CVE-2021-36826 Unspecified vulnerability in Wedevs WP Project Manager
Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13 versions.
network
low complexity
wedevs
5.4