Advisories · Technology
specialk User Submitted Posts – Enable Users to Submit Posts from the Front End.
Every CVE that names specialk User Submitted Posts – Enable Users to Submit Posts from the Front End among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Broken access control
- CVSS 7.2 High
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 7.2 High
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
- specialk User Submitted Posts – Enable Users to Submit Posts from the Front End
- Unrestricted file upload