Alfred Click Collect Vulnerabilities

<p>WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Backdoor</p><p>Affected Version <= 1.1.7</p>

Affected:

up to 1.1.7

Fix:

No patched version reported

Disclosed:

Jul 3, 2024

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 versions.

Affected:

up to 1.1.7

Fix:

No patched version reported

Disclosed:

Apr 24, 2023

CVE-2022-47158 on NVD →

The alfred24 Click & Collect plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web s...

CVSS:

5.5

Affected:

up to 1.1.7

Fix:

No patched version reported

Disclosed:

Jan 13, 2023

CVE-2022-47158 on NVD →