Skip to content

Product

code-atlantic content control vulnerabilities

1 published CVE affecting code-atlantic content control, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest code-atlantic content control CVEs

Newest publication first

  1. CVE-2022-4509 Content Control < 1.1.10 - Contributor+ Stored XSS

    Published
    MediumCVSS 5.4

    The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be us...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.