Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. id: CVE-2017-18517 info: name: Pinterest by BestWebSoft 1.0.5 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2019-18517

...

CVE-2019-18517

CVE-2019-18517 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18517

CVE-2017-18517 affects the WordPress plugin bws-pinterest prior to version 1.0.5 from the vendor BestWebSoft. The connected document set describes multiple Cross-Site Scripting (XSS) issues in this plugin, enabling an attacker to execute arbitrary JavaScript in victims’ browsers. The Nuclei templ...

CVE-2018-18517

Citrix NetScaler Gateway (and ADC) were found vulnerable to a Cross-Site Scripting (XSS) condition. Exploitation could allow remote, authenticated users to execute client-side scripts in the web context, potentially compromising the user session or sensitive information. The issue affects NetScal...