The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
Product
bestwebsoft linkedin vulnerabilities
2 published CVES affecting bestwebsoft linkedin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest bestwebsoft linkedin CVEs
Newest publication first
-
MediumCVSS 6.1 EPSS 1.7%
-
MediumCVSS 6.1 EPSS 0.89%
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fie...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.