CVE-2018-13832: Improper Neutralization of Input During Web Page Generation

Multiple Persistent cross-site scripting XSS issues in the Techotronic all-in-one-favicon aka All In One Favicon plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text...

PT-2018-12212

Name of the Vulnerable Software and Affected Versions All In One Favicon plugin version 4.6 Description The issue concerns multiple persistent cross-site scripting XSS problems. Remote attackers can inject arbitrary web script or HTML via specific text fields, including Apple-Text, GIF-Text,...