← Back

Apidaze

apidaze

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Widget4call
widget4call
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-13099
1Apidaze
1Widget4call
Jun 17, 2026
Feb 1, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users...Show more
The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.Show less
CVE-2024-5727
1Apidaze
1Widget4call
Jun 17, 2026
Jun 28, 2024
N/A· v4
4.7 MEDIUM· v3
N/A· v2
The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users...Show more
The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less