Tommaso Gregori

An incorrect authorization issue allows forceful browsing. The module fails to sufficiently check entity access across several editor endpoints. Exploitation requires the attacker to possess a role with the "use gutenberg" permission.

The plugin does not prohibit symbolic links in shared libraries. This allows attackers who can control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem.

The plugin does not employ cryptographically secure algorithms for generating One-Time Password (OTP) codes, which could allow for account takeovers.

The WordPress plugin does not properly sanitize and escape the ` stylesheet` parameter before outputting it, leading to a Reflected Cross-Site Scripting issue. This could potentially be used against users with high privileges, such as administrators.

Name of the Vulnerable Software and Affected Versions: Hostel WordPress plugin versions prior to 1.1.5.8 Description: The Hostel WordPress plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. This could be used against high privilege users, such as administrators. Recommendations: Update the Hostel WordPress plugin to version 1.1.5.8 or later.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high-privilege users, such as administrators.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a `parameter` is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high-privilege users, such as administrators.