Advisories · Technology
kitae-park Mang Board.
Every CVE that names kitae-park Mang Board among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 7.2 High
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
- kitae-park Mang Board
- Unrestricted file upload
- CVSS 7.2 High
Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 8.1 High
Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
- kitae-park Mang Board
- File inclusion
- CVSS 7.2 High
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
- kitae-park Mang Board
- Cross-site scripting (XSS)
- CVSS 7.2 High
Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
- kitae-park Mang Board
- Cross-site scripting (XSS)