← Back

Andrewabarber

andrewabarber

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Wordpress Jitsi Shortcode
wordpress_jitsi_shortcode
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-3978
1Andrewabarber
1Wordpress Jitsi Shortcode
Jun 17, 2026
Jun 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users wi...Show more
The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksShow less
CVE-2024-3977
1Andrewabarber
1Wordpress Jitsi Shortcode
Jun 17, 2026
Jun 14, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when...Show more
The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less