WP-Spreadplugin [wp-spreadplugin] <= 4.8.9 (unfixed + closed)
unknown
[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thimo Grauerholz WP-Spreadplugin allows Stored XSS.This issue affects WP-Spreadplugin: from n/a through 4.8.9.
- Affected:
- up to 4.8.9
- Fix:
- No patched version reported
- Disclosed:
- Oct 16, 2024
CVE-2024-49266 on NVD →
WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The WP-Spreadplugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.8.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in page...
- CVSS:
- 5.5
- Affected:
- up to 4.8.9
- Fix:
- No patched version reported
- Disclosed:
- Oct 14, 2024
CVE-2024-49266 on NVD →
WP-Spreadplugin [wp-spreadplugin] < 3.8.6.6 (closed)
unknown
[en] A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of the file spreadplugin.php. The manipulation of the argument Spreadplugin leads to cross site scripting. The attack can be initiated remotely. Upgrading to v...
- Affected:
- up to 3.8.6.6
- Fixed in:
- 3.8.6.6
- Disclosed:
- Apr 21, 2024
CVE-2015-10132 on NVD →
WP SpreadPlugin < 3.8.6.2 - Cross-Site Scripting
high
The WP SpreadPlugin plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 3.8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
- CVSS:
- 7.1
- Affected:
- up to 3.8.6.2
- Fixed in:
- 3.8.6.2
- Disclosed:
- Apr 21, 2015
CVE-2015-10132 on NVD →
WP-Spreadplugin [wp-spreadplugin] < 3.8.6.2 (closed)
unknown
The WP SpreadPlugin plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 3.8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
- Affected:
- up to 3.8.6.2
- Fixed in:
- 3.8.6.2
- Disclosed:
- Apr 21, 2015
WP-Spreadplugin [wp-spreadplugin] < 3.8.6.2 (closed)
unknown
The WP-Spreadplugin WordPress plugin was affected by a XSS security vulnerability.
- Affected:
- up to 3.8.6.2
- Fixed in:
- 3.8.6.2
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database