Approved changes feed: RSS · Atom

cpe:2.3:a:totalsuite:totalcontest:*:*:*:*:lite:wordpress:*:*

part: a version: * update: *

VendorTotalsuite (02426964-d3f2-5fa6-9e00-142cf60afea2)
ProductTotalcontest (ff544c32-cc09-5684-b8c3-82b7db176054)
Edition*
Language*
Software editionlite
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13822 vulnerable 2026-06-08 06:25:38.559669 Total Contest Lite <= 2.8.1 - Reflected XSS
The Photo Contest | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2025-02-24T06:00:04.117Z
Updated: 2025-02-24T11:26:57.421Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.