webartisan vulnerabilities

Products

• soundy audio playlist 1
• soundy background music 1

Latest webartisan CVEs

Newest publication first

1. CVE-2018-6002 Soundy Background Music <= 3.9 - Cross-Site Scripting

   Published 2018-01-22

   Medium·CVSS 6.1

   The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php (war_soundy_preview parameter).

2. CVE-2018-6001 The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php (war_sdy_pl_preview parameter).

   Published 2018-01-22

   Medium·CVSS 6.1

   The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php (war_sdy_pl_preview parameter).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.