Vulnerabilities in amauric
8 resultsCVE-2024-13888HIGHWPMobile.App <= 11.56 - Open Redirect via 'redirect' ParameterEPSS 0.7%CVE-2023-3620MEDIUMCross-site Scripting (XSS) - Stored in amauric/tarteaucitron.jsEPSS 0.5%CVE-2024-12420MEDIUMWPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2025-31476MEDIUMtarteaucitron.js allows url scheme injection via unfiltered inputsEPSS 0.3%CVE-2025-31475MEDIUMtarteaucitron.js allows prototype pollution via custom text injectionEPSS 0.3%CVE-2025-31138MEDIUMtarteaucitron.js allows UI manipulation via unrestricted CSS injectionEPSS 0.2%CVE-2025-48939MEDIUMtarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptEPSS 0.2%CVE-2026-22809MEDIUMtarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityEPSS 0.1%