EUVD-2019-6160

Malware in sbrugna...

CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

CVE-2024-13823: Improper Neutralization of Input During Web Page Generation

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

PT-2025-21465 · WordPress · 360 Product Rotation

Name of the Vulnerable Software and Affected Versions: 360 Product Rotation WordPress plugin versions 1.5.8 and earlier Description: The issue is related to a Reflected Cross-Site Scripting error. This occurs because a parameter is not properly sanitized and escaped before being outputted back in...

360 Product Rotation <= 1.5.8 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. http://example.com/wp-content/plugins/360-product-rotation/includes/iframe.php?licenseid=1"ale...

CVE-2019-15082

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

CVE-2019-15082

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

Cross site scripting

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

CVE-2019-15082

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

CVE-2019-15082

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

PT-2019-13974

Name of the Vulnerable Software and Affected Versions 360-product-rotation plugin versions prior to 1.4.8 Description The issue is related to reflected XSS in the 360-product-rotation plugin for WordPress. Recommendations For versions prior to 1.4.8, update to version 1.4.8 or later to resolve th...

CVE-2019-15082: Improper Neutralization of Input During Web Page Generation

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS...

WordPress 360 Product Rotation plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by ImplosionSec in WordPress 360 Product Rotation plugin versions = 1.4.7. Solution Update the WordPress 360 Product Rotation plugin to the latest available version at least 1.4.8...