Romain Deperne

Weak authentication in Windows AppContainer allows an authorized attacker to disclose sensitive information locally, which can affect the system.

An issue in the contact-form-7-honeypot component allows for the insertion of sensitive information into sent data, which can lead to the retrieval of embedded sensitive data.

Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with Author-level access and above can inject arbitrary web scripts through the `shopengine product title header size` parameter. These scripts execute whenever a user accesses the affected page.

Stored Cross-Site Scripting occurs when authenticated attackers with contributor-level access or higher inject arbitrary web scripts into pages. The issue stems from insufficient input sanitization and output escaping within the `accordion header renderer()` function. Specifically, the function uses `esc attr()` instead of `tag escape()` when processing the `accordionTitleTag` block attribute in an HTML tag-name context, allowing the execution of scripts whenever a user visits the affected page.

Stored Cross-Site Scripting occurs in the Site Logo Title and Single Author Box Widgets due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages. These scripts execute when a user visits the affected page. Exploitation involves intercepting and modifying the `elementor ajax` AJAX save request to bypass client-side SELECT control restrictions and submit arbitrary tag-name values.

The myCred plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts through the `wrap` shortcode attribute. These scripts execute whenever a user visits the affected page.

The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and output escaping within the `title tag` widget setting. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages. These scripts execute when a user visits the affected page. The issue specifically impacts the Posts Timeline widget and the Posts Carousel widget (including its default, Banner, and Modern skins), as these components lack the whitelist validation used in the Posts List widget.

Insufficient input sanitization and output escaping in the Widget HTML Tag Settings allow authenticated attackers with contributor-level access or higher to perform Stored Cross-Site Scripting. This occurs because payloads without HTML angle brackets, such as `img src=x onerror=alert(document.domain)`, bypass the `wp kses post()` filter, enabling the injection of arbitrary web scripts that execute when a user visits the affected page.

The Royal Elementor Addons and Templates plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts through the `title tag` parameter. These scripts execute whenever a user visits the affected page.