PRODUCT PROFILE

12_step_meeting_list

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2025-245822026/02/26

12 Step Meeting List < 3.16.6 - Unauthenticated Sensitive Information Exposure

The 12 Step Meeting List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.5.This makes it possible for unauthenticated attackers to extract sensitive user or configuration data via two AJAX endpoints: tsml_info and tsml_geocodes.

12_step_meeting_listPoC 已收录

CVSS—

中危CVE-2024-356932024/06/08

WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Code for Recovery 12 Step Meeting List allows Reflected XSS.This issue affects 12 Step Meeting List: from n/a through 3.14.33.

12_step_meeting_listPoC 已收录

CVSS6.1