← Back

Json Content Importer

json_content_importer

Vendor: Json Content Importer • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-38723
1Json Content Importer
1Json Content Importer
Nov 21, 2024
Jul 22, 2024
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6.
CVE-2023-6268
1Json Content Importer
1Json Content Importer
Nov 21, 2024
Dec 26, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high p...Show more
The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less
CVE-2023-25485
1Json Content Importer
1Json Content Importer
Nov 21, 2024
Apr 25, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bernhard Kux JSON Content Importer plugin <= 1.3.15 versions.