Filtered by vendor Emarketdesign Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-2239 1 Emarketdesign 1 Request A Quote 2023-11-07 4.8 Medium
The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2021-24489 1 Emarketdesign 1 Request A Quote 2023-11-07 4.8 Medium
The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.
CVE-2023-40558 1 Emarketdesign 1 Youtube Video Gallery 2023-10-06 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.3.5 versions.
CVE-2022-2240 1 Emarketdesign 1 Request A Quote 2022-07-29 8.8 High
The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it
CVE-2022-2151 1 Emarketdesign 1 Best Contact Management Software 2022-07-18 4.8 Medium
The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2021-24420 1 Emarketdesign 1 Request A Quote 2021-10-27 5.4 Medium
The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.
CVE-2021-24622 1 Emarketdesign 1 Customer Service Software \& Support Ticket System 2021-10-21 4.8 Medium
The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.