Felipe Restrepo Rodriguez

**Name of the Vulnerable Software and Affected Versions** Gianism WordPress plugin versions through 5.1.0 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escaped, and it can occur even when the unfiltered html capability is disallowed, for example in a multisite setup. **Recommendations** For versions through 5.1.0, update to a version that properly sanitises and escapes its settings to prevent Stored Cross-Site Scripting attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** underConstruction versions n/a through 1.21 **Description** The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS attacks. **Recommendations** For versions n/a through 1.21, update to a version that contains a fix for this issue, as no specific fixed version is mentioned in the provided data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Insert PHP Code Snippet plugin for WordPress versions up to, and including, 1.3.4 **Description** The issue allows for Stored Cross-Site Scripting via the user's name when accessing the "insert-php-code-snippet-manage" page due to insufficient input sanitization and output escaping. This enables authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For Insert PHP Code Snippet plugin for WordPress versions up to, and including, 1.3.4, update to a version later than 1.3.4 to resolve the issue. As a temporary workaround, consider restricting access to the insert-php-code-snippet-manage page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress versions up to, and including, 2.6.6 **Description** The issue is related to Stored Cross-Site Scripting via the Google Captcha Site Key due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue only affects multi-site installations and installations where unfiltered html has been disabled. **Recommendations** For versions up to, and including, 2.6.6, update to a version that includes the necessary input sanitization and output escaping fixes to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting administrator-level access to trusted users only and enabling the unfiltered html capability for administrators to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress versions up to, and including, 4.15.3 **Description** The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages by tricking a user into performing an action, such as clicking on a link, using the `idsite` parameter. **Recommendations** For versions up to, and including, 4.15.3, update to a version higher than 4.15.3 to resolve the issue. As a temporary workaround, consider restricting access to the `idsite` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WP TripAdvisor Review Slider WordPress plugin versions prior to 11.9 **Description** The WP TripAdvisor Review Slider WordPress plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered html capability is disallowed, for example in multisite setup. **Recommendations** For versions prior to 11.9, update to version 11.9 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high privilege users to access and modify the plugin's settings until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Rbs Image Gallery WordPress plugin versions prior to 3.2.16 **Description** The issue concerns the Rbs Image Gallery WordPress plugin, where certain settings are not properly sanitized and escaped. This could allow high-privilege users, such as administrators, to perform Stored Cross-Site Scripting attacks. This issue is notable even in setups where the unfiltered html capability is disallowed, such as in multisite configurations. **Recommendations** For versions prior to 3.2.16, update to version 3.2.16 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Ko-fi Button WordPress plugin versions prior to 1.3.3 **Description** The issue concerns the Ko-fi Button WordPress plugin, which does not properly handle some of its settings. This could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks, even when the unfiltered html capability is disallowed, such as in a multisite setup. The risk associated with this issue is considered low. **Recommendations** For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the plugin's settings to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NEX-Forms WordPress plugin versions prior to 8.4.4 **Description** The issue is related to Stored Cross-Site Scripting, which could be caused by the lack of proper escaping of the form name. This could potentially be exploited by users with access to form creation, which by default includes SuperAdmins in multisite environments and admins in single-site setups. However, the risk may be extended to lower roles if the settings allow them to create forms. **Recommendations** For versions prior to 8.4.4, update to version 8.4.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Buy Me a Coffee WordPress plugin versions prior to 3.7 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and escape some of its settings, and this vulnerability can be exploited even when the unfiltered html capability is disallowed, for example in a multisite setup. **Recommendations** For versions prior to 3.7, update to version 3.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AI Engine WordPress plugin versions prior to 1.6.83 **Description** The issue allows high-privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in a multisite setup. This is due to the plugin not sanitizing and escaping some of its settings. **Recommendations** For versions prior to 1.6.83, update to version 1.6.83 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high-privilege users to access and modify the plugin's settings until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Hostel WordPress plugin versions prior to 1.1.5.2 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in a multisite setup. This is due to the plugin not sanitizing and escaping some of its settings. **Recommendations** For Hostel WordPress plugin versions prior to 1.1.5.2, update to version 1.1.5.2 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to trusted users only until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** Namaste! LMS WordPress plugin versions prior to 2.5.9.4 **Description** The issue allows high-privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitized and escaped, making it vulnerable even when the unfiltered html capability is disallowed, for example, in a multisite setup. **Recommendations** For versions prior to 2.5.9.4, update to version 2.5.9.4 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high-privilege users to modify settings that could be used for Stored Cross-Site Scripting attacks until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Arigato Autoresponder and Newsletter WordPress plugin versions prior to 2.1.7.2 **Description** The issue concerns the Arigato Autoresponder and Newsletter WordPress plugin, where certain settings are not properly sanitized and escaped. This could allow high-privilege users, such as administrators, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed. **Recommendations** For versions prior to 2.1.7.2, update to version 2.1.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's settings for high-privilege users until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Watu Quiz WordPress plugin versions prior to 3.3.8.2 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisite setups. This is due to the plugin not sanitizing and escaping some of its settings. **Recommendations** For versions prior to 3.3.8.2, update to version 3.3.8.2 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high privilege users to access and modify the plugin's settings until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Watu Quiz WordPress plugin versions prior to 3.3.8.2 **Description** The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a `parameter` is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high-privilege users, such as admins. **Recommendations** For versions prior to 3.3.8.2, update to version 3.3.8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WS Form LITE and Pro versions prior to 1.8.176 **Description** The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of the Form Name, even when the unfiltered html capability is disallowed. **Recommendations** For versions prior to 1.8.176, update to version 1.8.176 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WS Form LITE and Pro versions prior to 1.8.176 **Description** The issue allows an unauthenticated attacker to submit XSS payloads through unsanitized and unescaped form data. When a privileged user views the related submission, the XSS payload will be executed. **Recommendations** For versions prior to 1.8.176, update to version 1.8.176 or later to resolve the issue. As a temporary workaround, consider restricting access to form submissions for privileged users until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Visual Form Builder WordPress plugin versions prior to 3.0.4 **Description** The issue allows high privilege users, such as admins, to set Cross-Site Scripting payload in the Form Name, even when the unfiltered html capability is disallowed. This is due to the lack of sanitization or escaping of the Form Name. **Recommendations** For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high privilege users to set the Form Name until the update is applied.

Name of the Vulnerable Software and Affected Versions: WordPress Contact Forms by Cimatti WordPress plugin versions prior to 1.4.12 Description: The issue arises from the lack of sanitization and escaping of the Form Title before it is outputted in some admin pages. This could allow high privilege users to perform Cross-Site Scripting attacks, even in scenarios where the unfiltered html is disallowed. Recommendations: For versions prior to 1.4.12, update to version 1.4.12 or later to resolve the issue. As a temporary workaround, consider restricting access to admin pages where the Form Title is outputted to minimize the risk of exploitation.