Approved changes feed: RSS · Atom

cpe:2.3:a:otwthemes:tabs_shortcode_and_widget:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorOtwthemes (6f083afe-ad9c-58fc-a5cc-ad8ad7d44025)
ProductTabs Shortcode And Widget (cb30d25a-0dea-5f2e-8bd3-738c05de6108)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/tabs-shortcode-and-widget purl2cpe 2026-06-01 10:16:40.027432
pkg:github/wpplugins/tabs-shortcode-and-widget purl2cpe 2026-06-01 10:16:40.027434

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0719 vulnerable 2026-06-08 06:22:01.980377 Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting
The Tabs Shortcode and Widget WordPress plugin through 1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Published: 2024-03-18T19:05:43.770Z
Updated: 2024-08-09T18:41:12.349Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.