WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting

WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible the...

CVE-2022-40968

CVE-2022-40968 describes a vulnerability in the WordPress plugin “2kb Amazon Affiliates Store” version

CVE-2022-40968: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in 2kb Amazon Affiliates Store plugin =2.1.5 on WordPress...

CVE-2017-14622: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

PT-2017-13588

Name of the Vulnerable Software and Affected Versions 2kb Amazon Affiliates Store plugin versions prior to 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter or the kbAction parameter in the "kbAmz" page to...

WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability

WordPress 2kb Amazon Affiliates Store plugin versions 2.1.0 and below suffer from a cross site scripting vulnerability. WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon...