Extension WordPress
Vulnérabilités Cost Calculator
Cette page rassemble les failles publiées pour Cost Calculator, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Cost Calculator
4 fiches
Cost Calculator <= 1.8 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-1.8
Non indiqué
02/03/2023
Cost Calculator <= 1.8 – Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's nd_cost_calculator shortcode in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-1.8
Non indiqué
13/02/2023
Cost Calculator <= 1.5 – Contributor+ Stored Cross-Site Scripting
The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price Settings (which gets injected on the…
*-1.5
1.6
01/02/2022
Cost Calculator <= 1.8 – Authenticated Local File Inclusion
The Cost Calculator WordPress plugin through 1.7 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions
*-1.8
Non indiqué
01/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.