Zakaria

**Name of the Vulnerable Software and Affected Versions** Shortcodify versions prior to 1.4.4 **Description** Insufficient input sanitization and output escaping in the Shortcodify plugin allow authenticated attackers with contributor-level access or higher to perform Stored Cross-Site Scripting (XSS). This occurs via the `name` shortcode attribute, enabling the injection of arbitrary web scripts into pages that execute when accessed by other users. **Recommendations** Update Shortcodify to version 1.4.4 or later.

**Name of the Vulnerable Software and Affected Versions** BuddyHolis TableSearch versions prior to 1.1.1 **Description** Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts via the `placeholder` parameter, which then execute when a user visits the affected page. **Recommendations** Update BuddyHolis TableSearch to a version newer than 1.1.0. Avoid using the `placeholder` parameter until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Surbma | Infusionsoft Shortcode versions prior to 2.0.2 **Description** Stored Cross-Site Scripting occurs via the 'infusionsoft-form' shortcode. The issue stems from insufficient input sanitization and output escaping within the `surbma infusionsoft shortcode shortcode()` function. Specifically, the `account` and `id` shortcode attributes are concatenated directly into a `<script>` tag's src attribute. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages, which execute when a user visits the affected page. **Recommendations** Update Surbma | Infusionsoft Shortcode to version 2.0.2 or later. As a temporary mitigation, restrict the ability of users with contributor-level access to edit pages or use the 'infusionsoft-form' shortcode.

**Name of the Vulnerable Software and Affected Versions** MIR blocks and shortcodes versions prior to 1.0.1 **Description** The MIR blocks and shortcodes plugin for WordPress contains a Stored Cross-Site Scripting issue. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages. This occurs due to insufficient input sanitization and output escaping of user-supplied shortcode attributes within the `msc stats()` rendering function. The affected attributes include `title` and `ready animation text` of the 'msc stats' shortcode. **Recommendations** Update the plugin to a version later than 1.0.0. As a temporary workaround, restrict the use of the `title` and `ready animation text` attributes within the 'msc stats' shortcode.

**Name of the Vulnerable Software and Affected Versions** Fancy Testimonials versions prior to 1.1 **Description** The Fancy Testimonials plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs due to insufficient input sanitization and output escaping within the `author` attribute of the `testimonial` shortcode. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 1.0. As a temporary workaround, restrict the ability of users with Contributor-level access to use the `testimonial` shortcode or the `author` attribute.

**Name of the Vulnerable Software and Affected Versions** ePaperFlip Publisher versions prior to 1.1 **Description** The ePaperFlip Publisher plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the `publicationid` attribute of the `epaperflip embed` shortcode lacks sufficient input sanitization and output escaping, allowing the attribute to be injected directly into inline JavaScript. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update to a version later than 1. As a temporary workaround, restrict the use of the `publicationid` attribute within the `epaperflip embed` shortcode for users with Contributor-level access.

**Name of the Vulnerable Software and Affected Versions** TinyMCE shortcode Addon plugin for WordPress versions prior to 1.0.1 **Description** Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access or higher to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts through the `btnrel` shortcode attribute, which execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 1.0.0. As a temporary mitigation, restrict the use of the `btnrel` attribute in shortcodes for users with contributor-level access.

**Name of the Vulnerable Software and Affected Versions** Easy Cart versions prior to 1.9 **Description** The Easy Cart plugin for WordPress contains a Stored Cross-Site Scripting issue. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages. This occurs because the `ectp add to cart()` function fails to properly escape double quote characters when processing shortcode attributes, allowing an attacker to break out of the HTML attribute context and inject event handlers. The affected attributes include `itemid`, `product name`, `product desc`, `product qty`, and `price` within the 'add to cart' shortcode. **Recommendations** Update to a version later than 1.8. As a temporary workaround, restrict the use of the 'add to cart' shortcode and its attributes `itemid`, `product name`, `product desc`, `product qty`, and `price` for users with Contributor-level access.

**Name of the Vulnerable Software and Affected Versions** DeMomentSomTres Shortcodes versions prior to 1.1.2 **Description** The DeMomentSomTres Shortcodes plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the `st callout()` function fails to properly sanitize input and escape output for the `width` and `align` attributes of the 'callout' shortcode, concatenating these values directly into an HTML style attribute. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update to a version later than 1.1.1. As a temporary workaround, restrict the use of the 'callout' shortcode or limit the `width` and `align` attributes until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Github Shortcode versions prior to 0.2 **Description** The Github Shortcode plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because of insufficient input sanitization and output escaping within the `repo` attribute of the 'github' shortcode. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 0.1. As a temporary workaround, restrict the ability of users with Contributor-level access to use the `repo` attribute in the 'github' shortcode.

**Name of the Vulnerable Software and Affected Versions** faq shortocde versions prior to 1.1 **Description** The faq shortocde plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs because the `color` attribute within the 'faq' shortcode does not have sufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 1.0. As a temporary mitigation, restrict the use of the `color` attribute in the 'faq' shortcode for users with Contributor-level access.

**Name of the Vulnerable Software and Affected Versions** My Email Shortcode versions prior to 0.92 **Description** The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and output escaping within the `subject` attribute of the 'my-email' shortcode. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 0.91.

**Name of the Vulnerable Software and Affected Versions** Shortcode Buddy versions prior to 0.1.9.6 **Description** Stored Cross-Site Scripting (XSS) occurs due to insufficient input sanitization and output escaping within shortcode attributes. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update Shortcode Buddy to version 0.1.9.6 or later.

**Name of the Vulnerable Software and Affected Versions** Listen Shortcode versions prior to 1.1 **Description** Stored Cross-Site Scripting occurs via the 'listen' shortcode. The issue stems from insufficient input sanitization and output escaping within the `listenEmbedJS()` function. Specifically, user-supplied attributes `src`, `start`, and `end` are echoed inside a single-quoted HTML attribute without proper escaping. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts into pages, which execute when a user visits the affected page. **Recommendations** Update Listen Shortcode to a version newer than 1.0. As a temporary mitigation, restrict user permissions to prevent users with contributor-level access from editing pages or using the 'listen' shortcode.

**Name of the Vulnerable Software and Affected Versions** WP Iframe Geo Style for Amazon affiliates versions prior to 1.2 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts into pages via the `adid` shortcode attribute. These scripts execute whenever a user accesses the affected page. **Recommendations** Update to a version newer than 1.1. As a temporary mitigation, restrict the use of the `adid` attribute in shortcodes for users with contributor-level access.

**Name of the Vulnerable Software and Affected Versions** hk shortcode versions prior to 1.1 **Description** The plugin is subject to Stored Cross-Site Scripting (XSS), a flaw where malicious scripts are permanently stored on the target server. The issue exists in the `huankong post short title plane()` function when processing the 'title-plane' shortcode. Specifically, the `title` attribute is concatenated directly into the HTML output without proper sanitization or escaping. Authenticated attackers with contributor-level access or higher can exploit this to inject arbitrary web scripts into pages, which then execute in the browser of any user who views the affected page. **Recommendations** Update to a version later than 1.0. As a temporary mitigation, restrict the use of the 'title-plane' shortcode or limit user permissions to prevent contributors from editing pages containing shortcodes.

**Name of the Vulnerable Software and Affected Versions** Faces of Users versions prior to 0.0.4 **Description** The Faces of Users plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs due to insufficient input sanitization and output escaping within the `default` attribute of the 'facesofusers' shortcode. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update the plugin to a version later than 0.0.3. As a temporary workaround, restrict the use of the `default` attribute in the 'facesofusers' shortcode for users with Contributor-level access.

**Name of the Vulnerable Software and Affected Versions** Advanced Social Media Icons versions prior to 1.3 **Description** Stored Cross-Site Scripting occurs via the `social` shortcode due to insufficient input sanitization and output escaping on user supplied attributes. Authenticated attackers with Contributor-level access and above can inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update Advanced Social Media Icons to version 1.3 or later.

**Name of the Vulnerable Software and Affected Versions** Bootstrap Shortcode versions prior to 1.1 **Description** Stored Cross-Site Scripting occurs via the `box` shortcode due to insufficient input sanitization and output escaping on user supplied attributes. Authenticated attackers with Contributor-level access and above can inject arbitrary web scripts into pages, which execute when a user accesses the affected page. **Recommendations** Update the plugin to a version later than 1.0.

**Name of the Vulnerable Software and Affected Versions** WP-Clippy versions prior to 1.0.1 **Description** The WP-Clippy plugin for WordPress contains a stored cross-site scripting issue. This occurs because of insufficient input sanitization and output escaping on user-supplied attributes within the `clippy` shortcode. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user visits the affected page. **Recommendations** Update to a version later than 1.0.0.