← Back

Loan Comparison

loan_comparison

Vendor: Loan Comparison Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0442
1Loan Comparison Project
1Loan Comparison
Jun 17, 2026
Feb 21, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject ja...Show more
The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.Show less