← Back

Mpl Publisher

mpl-publisher

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mpl Publisher
mpl-publisher
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-46226
1Mpl Publisher
1Mpl Publisher
Jun 17, 2026
Apr 22, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through <= 2.18.0.
CVE-2021-39343
1Mpl Publisher
1Mpl Publisher
Jun 17, 2026
Oct 19, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed...Show more
The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.30.2. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.Show less