WordPress AnyComment plugin <= 0.3.4 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Brandon Roldan in WordPress AnyComment plugin versions = 0.3.4. Solution Update the WordPress AnyComment plugin to the latest available version at least 0.3.5...

WordPress anycomment plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress anycomment plugin versions prior to 0.0.33. The...

CVE-2018-21001

The anycomment plugin before 0.0.33 for WordPress has XSS...

Cross site scripting

The anycomment plugin before 0.0.33 for WordPress has XSS...

CVE-2018-21001

The anycomment plugin before 0.0.33 for WordPress has XSS...

CVE-2018-21001

CVE-2018-21001 affects the WordPress AnyComment plugin prior to 0.0.33. The root cause is insufficient validation of client-side data in the anycomment plugin, enabling cross-site scripting (XSS). Several sources (NVD, Red Hat, CNVD, CVE lists) corroborate an XSS vulnerability with this version c...

CVE-2018-21001: Improper Neutralization of Input During Web Page Generation

The anycomment plugin before 0.0.33 for WordPress has XSS...

Anycomment < 0.0.33 - XSS

The AnyComment WordPress plugin was affected by a XSS security vulnerability...