Easy Pie Coming Soon Vulnerabilities

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Coming Soon Page plugin <= 1.0.7.3 versions.

Affected:

up to 1.0.7.4

Fixed in:

1.0.7.4

Disclosed:

Apr 7, 2023

CVE-2023-24398 on NVD →

The EZP Coming Soon Page Plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web scripts in pages that...

CVSS:

4.4

Affected:

up to 1.0.73

Fixed in:

1.0.74

Disclosed:

Feb 2, 2023

CVE-2023-24398 on NVD →

The Easy Pie Coming Soon plugin for WordPress is vulnerable to Cross-Site Scripting via the 'tab' parameter in versions up to, and including,1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:

6.1

Affected:

up to 1.0.1

Fixed in:

1.0.1

Disclosed:

Aug 10, 2015

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Update the plugin.

Affected:

up to 1.0.1

Fixed in:

1.0.1

Disclosed:

Aug 10, 2015

The Easy Pie Coming Soon plugin for WordPress is vulnerable to Cross-Site Scripting via the 'tab' parameter in versions up to, and including,1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

Affected:

up to 1.0.1

Fixed in:

1.0.1

Disclosed:

Aug 10, 2015

The EZP Coming Soon Page WordPress plugin was affected by an Authenticated Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 1.0.1

Fixed in:

1.0.1