Filtered by vendor Code-atlantic Subscriptions
Filtered by product Content Control Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-47501 1 Code-atlantic 1 Content Control 2025-05-08 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Code Atlantic Content Control allows DOM-Based XSS. This issue affects Content Control: from n/a through 2.6.1.
CVE-2022-4509 1 Code-atlantic 1 Content Control 2025-04-02 5.4 Medium
The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins.