Iframe Project vulnerabilities
4 vulnerabilities
Known vulnerabilities in Iframe Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Iframe4 vulnerabilities
CVE-2020-12696iframe_projectiframe+1
EPSS score2.01%
The iframe plugin before 4.5 for WordPress does not sanitize a URL.CVE-2023-52125iframe_projectiframe+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly iframe allows Stored XSS.This issue affects iframe: from n/a through 4.8.CVE-2023-4919iframe_projectiframe+2EPSS score0.59%
The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `iframe` shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permission and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This was partially patched in version 4.6 and fully patched in version 4.7.CVE-2023-24394gopi ramasamyiframe popup+2EPSS score0.37%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.