Unknown Complianz Premium vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Complianz Premium, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-3494really-simple-pluginscomplianz+4
EPSS score
1.32%
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.6.4CVE-2023-1069really-simple-pluginscomplianz+4
EPSS score
0.56%
The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks