Lucene search

IFrame Security Vulnerabilities

cve

CVE-2020-12696

The iframe plugin before 4.5 for WordPress does not sanitize a URL.

6.1CVSS

6.2AI Score

0.001EPSS

2020-05-07 05:15 AM

cve

CVE-2023-24394

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.

5.9CVSS

4.8AI Score

0.0004EPSS

2023-08-25 11:15 AM

cve

CVE-2023-4919

The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the iframe shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permission and above, to...

6.4CVSS

5.3AI Score

0.0005EPSS

2023-10-20 07:15 AM

cve

CVE-2023-52125

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly iframe allows Stored XSS.This issue affects iframe: from n/a through 4.8.

6.5CVSS

5.8AI Score

0.0004EPSS

2024-01-05 12:15 PM