Advanced Floating Content Lite Vulnerabilities

The Advanced Floating Content Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to...

CVSS:

4.4

Affected:

up to 1.2.5

Fixed in:

1.2.6

Disclosed:

Apr 22, 2024

CVE-2024-32723 on NVD →

The Advanced Floating Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to...

CVSS:

6.4

Affected:

up to 1.2.1

Fixed in:

1.2.2

Disclosed:

Oct 24, 2022

CVE-2022-43458 on NVD →