Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CM Header and Footer – Add custom scripts and styles to your header and footer with ease
Vendor
creativemindssolutions
Product
CM Header and Footer – Add custom scripts and styles to your header and footer with ease
Platforms
Unknown
Default status
unaffected
CM Header and Footer – Add custom scripts and styles to your header and footer with ease · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.2.1
None listed
CM Business Directory – Optimise and showcase local business
Vendor
creativemindssolutions
Product
CM Business Directory – Optimise and showcase local business
Platforms
Unknown
Default status
unaffected
CM Business Directory – Optimise and showcase local business · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.4.1
None listed
CM Search And Replace – Optimize content edits with a powerful search and replace tool
Vendor
creativemindssolutions
Product
CM Search And Replace – Optimize content edits with a powerful search and replace tool
Platforms
Unknown
Default status
unaffected
CM Search And Replace – Optimize content edits with a powerful search and replace tool · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.4.2
None listed
CM E-Mail Blacklist – Simple email filtering for safer registration
Vendor
creativemindssolutions
Product
CM E-Mail Blacklist – Simple email filtering for safer registration
Platforms
Unknown
Default status
unaffected
CM E-Mail Blacklist – Simple email filtering for safer registration · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.5.3
None listed
CM Pop-Up – Create engaging popups to capture attention and boost interaction
Vendor
creativemindssolutions
Product
CM Pop-Up – Create engaging popups to capture attention and boost interaction
Platforms
Unknown
Default status
unaffected
CM Pop-Up – Create engaging popups to capture attention and boost interaction · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.7.5
None listed
CM Video Lessons Manager – Simplify video lessons management for better education
Vendor
creativemindssolutions
Product
CM Video Lessons Manager – Simplify video lessons management for better education
Platforms
Unknown
Default status
unaffected
CM Video Lessons Manager – Simplify video lessons management for better education · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
1.8.2
None listed
CM Tooltip Glossary
Vendor
creativemindssolutions
Product
CM Tooltip Glossary
Platforms
Unknown
Default status
unaffected
CM Tooltip Glossary · Scoped product and version facts