Multiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter in the show-league page or (2) season parameter in the team page to wp-admin/admin.php.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| kolja_schleich | leaguemanager | 3.7 |
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-89,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| kolja_schleich | leaguemanager | 2.5 |
| kolja_schleich | leaguemanager | 2.6.3 |
| kolja_schleich | leaguemanager | 2.4.1 |
| kolja_schleich | leaguemanager | 3.6.8 |
| kolja_schleich | leaguemanager | 2.3 |
| kolja_schleich | leaguemanager | 3.0.2 |
| kolja_schleich | leaguemanager | 2.5.1 |
| kolja_schleich | leaguemanager | 3.7 |
| kolja_schleich | leaguemanager | 1.4.1 |
| kolja_schleich | leaguemanager | 1.1 |
| kolja_schleich | leaguemanager | 3.2.1 |
| kolja_schleich | leaguemanager | 3.3 |
| kolja_schleich | leaguemanager | 3.6.5 |
| kolja_schleich | leaguemanager | 3.4.2 |
| kolja_schleich | leaguemanager | 2.0 |
| kolja_schleich | leaguemanager | 2.9 |
| kolja_schleich | leaguemanager | 2.6.2 |
| kolja_schleich | leaguemanager | 3.1 |
| kolja_schleich | leaguemanager | 3.5.2 |
| kolja_schleich | leaguemanager | * |
| kolja_schleich | leaguemanager | 3.0.4 |
| kolja_schleich | leaguemanager | 2.5.2 |
| kolja_schleich | leaguemanager | 2.9.2 |
| kolja_schleich | leaguemanager | 2.6 |
| kolja_schleich | leaguemanager | 1.2.1 |
| kolja_schleich | leaguemanager | 1.3 |
| kolja_schleich | leaguemanager | 3.5.6 |
| kolja_schleich | leaguemanager | 3.6.1 |
| kolja_schleich | leaguemanager | 3.6.7 |
| kolja_schleich | leaguemanager | 3.2 |
| kolja_schleich | leaguemanager | 1.0 |
| kolja_schleich | leaguemanager | 3.4 |
| kolja_schleich | leaguemanager | 3.1.4 |
| kolja_schleich | leaguemanager | 3.5.1 |
| kolja_schleich | leaguemanager | 3.6 |
| kolja_schleich | leaguemanager | 1.4.2 |
| kolja_schleich | leaguemanager | 2.8 |
| kolja_schleich | leaguemanager | 1.5 |
| kolja_schleich | leaguemanager | 3.1.6 |
| kolja_schleich | leaguemanager | 3.4.1 |
| kolja_schleich | leaguemanager | 3.1.7 |
| kolja_schleich | leaguemanager | 3.1.8 |
| kolja_schleich | leaguemanager | 3.1.3 |
| kolja_schleich | leaguemanager | 3.5.4 |
| kolja_schleich | leaguemanager | 3.5.5 |
| kolja_schleich | leaguemanager | 2.9.1 |
| kolja_schleich | leaguemanager | 3.1.1 |
| kolja_schleich | leaguemanager | 2.6.1 |
| kolja_schleich | leaguemanager | 3.0.3 |
| kolja_schleich | leaguemanager | 3.5 |
| kolja_schleich | leaguemanager | 1.2.2 |
| kolja_schleich | leaguemanager | 1.4 |
| kolja_schleich | leaguemanager | 3.1.5 |
| kolja_schleich | leaguemanager | 3.6.4 |
| kolja_schleich | leaguemanager | 2.7 |
| kolja_schleich | leaguemanager | 3.1.2 |
| kolja_schleich | leaguemanager | 3.6.2 |
| kolja_schleich | leaguemanager | 3.0.1 |
| kolja_schleich | leaguemanager | 3.6.6 |
| kolja_schleich | leaguemanager | 3.1.9 |
| kolja_schleich | leaguemanager | 3.6.9 |
| kolja_schleich | leaguemanager | 1.2 |
| kolja_schleich | leaguemanager | 3.0 |
| kolja_schleich | leaguemanager | 2.2 |
| kolja_schleich | leaguemanager | 2.3.1 |
| kolja_schleich | leaguemanager | 2.7.1 |
| kolja_schleich | leaguemanager | 2.1 |
| kolja_schleich | leaguemanager | 2.9.3 |
| kolja_schleich | leaguemanager | 3.2.2 |
| kolja_schleich | leaguemanager | 3.3.1 |
| kolja_schleich | leaguemanager | 2.4 |
| kolja_schleich | leaguemanager | 3.6.3 |
| kolja_schleich | leaguemanager | 3.5.3 |