← Back

Quotes Llama

quotes_llama

Vendor: Quotes Llama Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1566
1Quotes Llama Project
1Quotes Llama
Jun 17, 2026
May 30, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Quotes llama WordPress plugin before 1.0.0 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Th...Show more
The Quotes llama WordPress plugin before 1.0.0 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. The attack could also be performed by tricking an admin to import a malicious CSV fileShow less