WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting

WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible the...

CVE-2022-40968

CVE-2022-40968 describes a vulnerability in the WordPress plugin “2kb Amazon Affiliates Store” version

CVE-2022-40968: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in 2kb Amazon Affiliates Store plugin =2.1.5 on WordPress...

WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability

WordPress 2kb Amazon Affiliates Store plugin versions 2.1.0 and below suffer from a cross site scripting vulnerability. WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon...