← Back

Sajjadhsagor

sajjadhsagor

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Wp Edit Username
wp_edit_username
1 CVE
Advanced Category And Custom Taxonomy Image
advanced_category_and_custom_taxonomy_image
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-9425
1Sajjadhsagor
1Advanced Category And Custom Taxonomy Image
Jun 17, 2026
Oct 18, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient in...Show more
The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2023-47527
1Sajjadhsagor
1Wp Edit Username
Jun 17, 2026
Dec 21, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5.