Section Widget (Ctltwp) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-05-23. Vendor: Ctltwp.

CVEs of Section Widget

• CVE-2025-46537 - CVSS 7.1 (high), 2025-05-23: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget section-widget allows Reflected…
• CVE-2025-46441 - CVSS 5.3 (medium), 2025-05-19: Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <=…