PRODUCT PROFILE

visual_css_style_editor

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-249342021/09/27

Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting

The plugin does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue

visual_css_style_editorPoC 已收录

CVSS6.1EPSS 3.8%

高危CVE-2019-118862019/05/13

Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access.

visual_css_style_editorPoC 已收录

CVSS8.8