Create Custom Dashboard Widget Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Custom Dashboard Widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0.

Affected:

up to 1.0.0

Fix:

No patched version reported

Disclosed:

Jan 2, 2025

CVE-2024-56024 on NVD →

The Custom Dashboard Widget plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succ...

CVSS:

6.1

Affected:

up to 1.0.0

Fix:

No patched version reported

Disclosed:

Dec 17, 2024

CVE-2024-56024 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Custom Dashboard Widget allows Stored XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0.

Affected:

up to 1.0.0

Fix:

No patched version reported

Disclosed:

Nov 19, 2024

CVE-2024-51860 on NVD →

The Custom Dashboard Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts i...

CVSS:

6.4

Affected:

up to 1.0.0

Fix:

No patched version reported

Disclosed:

Nov 8, 2024

CVE-2024-51860 on NVD →