John Jefferson Li

John Jefferson Li is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,047 of 3,515 contributors. Their disclosures were published between 2021 and 2024. The most productive year was 2021, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (67%). Other recurring categories include SQL Injection. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 1 critical and 0 high.

The most affected software includes Support Board (2), Popup Box (Developer) (1), across 2 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix. The most severe finding, "Support Board <= 3.3.3 - Multiple Unauthenticated SQL Injections", scores 9.8 out of 10.

2021202220232024

Critical

High

Medium

Low

Global Rank

#1047

of 3,515 researchers

Vulns

Critical1

High0

Medium2

Low0

Affected Assets

2plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

3 records


2024-01-22 00:00	Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting Popup Box (Developer) 20.0.0 – < 20.9.0	`CVE-2023-6591`	6.6 Medium	John Jefferson Li	Yes
2021-10-07 00:00	Support Board <= 3.3.4 - Agent+ Stored Cross-Site Scripting Support Board <= 3.3.4	`CVE-2021-24807`	6.4 Medium	John Jefferson Li	Yes
2021-09-03 00:00	Support Board <= 3.3.3 - Multiple Unauthenticated SQL Injections Support Board <= 3.3.3	`CVE-2021-24741`	9.8 Critical	John Jefferson Li	Yes

Showing 1–3 of 3 reports