Prothemedesign

prothemedesign

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-24439 1Prothemedesign 1Browser Screenshots Nov 21, 2024 Jul 12, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks as the image_class parameter of the browser-shot shortcod...Show more The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks as the image_class parameter of the browser-shot shortcode was not escaped.Show less
CVE-2009-5142 2Binarymoon Prothemedesign 2Mimbo Pro Timthumb May 6, 2026 Aug 21, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-24439

1Prothemedesign

1Browser Screenshots

Nov 21, 2024

Jul 12, 2021

N/A· v4

5.4 MEDIUM· v3

3.5 LOW· v2

The Browser Screenshots WordPress plugin before 1.7.6 allowed authenticated users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks as the image_class parameter of the browser-shot shortcod...Show more

CVE-2009-5142

2Binarymoon

Prothemedesign

2Mimbo Pro

Timthumb

May 6, 2026

Aug 21, 2014

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.