Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.2.3
unknown
[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Pagination plugin <= 1.2.2 versions.
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.3
- Disclosed:
- Jun 22, 2023
CVE-2023-28778 on NVD →
Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access, and above, to inject arbitrary web scrip...
- CVSS:
- 4.4
- Affected:
- up to 1.2.2
- Fixed in:
- 1.2.3
- Disclosed:
- Mar 27, 2023
CVE-2023-28778 on NVD →
Pagination by BestWebSoft < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to in...
- CVSS:
- 4.4
- Affected:
- up to 1.2.2
- Fixed in:
- 1.2.3
- Disclosed:
- Mar 23, 2023
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.2.3
unknown
The Pagination by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to in...
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.3
- Disclosed:
- Mar 23, 2023
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7
unknown
[en] The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
- Affected:
- up to 1.0.7
- Fixed in:
- 1.0.7
- Disclosed:
- Aug 20, 2019
CVE-2017-18527 on NVD →
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7
unknown
[en] Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2,...
- Affected:
- up to 1.0.7
- Fixed in:
- 1.0.7
- Disclosed:
- May 22, 2017
CVE-2017-2171 on NVD →
Pagination by BestWebSoft <= 1.0.6 - Multiple Cross-Site Scripting
medium
The Pagination by BestWebSoft plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
- CVSS:
- 6.1
- Affected:
- up to 1.0.6
- Fixed in:
- 1.0.7
- Disclosed:
- Apr 12, 2017
CVE-2017-18527 on NVD →
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin [pagination] < 1.0.7
unknown
- Affected:
- up to 1.0.7
- Fixed in:
- 1.0.7
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database