Stillbreathing

stillbreathing

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Bannerman

bannerman

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-1275 1Stillbreathing 1Bannerman Jun 17, 2026 May 30, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in mu...Show more The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in multisite)Show less
CVE-2014-4845 1Stillbreathing 1Bannerman May 6, 2026 Jul 10, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannerman_background parameter to wp-admin/options-general.php.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-1275

1Stillbreathing

1Bannerman

Jun 17, 2026

May 30, 2022

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in mu...Show more

CVE-2014-4845

1Stillbreathing

1Bannerman

May 6, 2026

Jul 10, 2014

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Cross-site scripting (XSS) vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannerman_background parameter to wp-admin/options-general.php.