CVE-2017-18516

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18516

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues...

Cross site scripting

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18516

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18516

CVE-2017-18516 affects the WordPress plugin bws-linkedin prior to version 1.0.5. The vulnerability is described as multiple XSS issues in the plugin, allowing authenticated attackers to execute arbitrary JavaScript in victims’ browsers, potentially stealing session cookies, credentials, or acting...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2017-18556

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18556

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

Cross site scripting

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

Cross site scripting

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

Cross site scripting

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18558

CVE-2017-18558 affects the WordPress plugin bws-testimonials, version before 0.1.9. The connected Nuclei/WPVuln/Red Hat et al. entries confirm multiple XSS flaws in this plugin, caused by inadequate input/output sanitization, enabling authenticated attackers to inject and execute arbitrary JavaSc...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2017-18557

The CVE-2017-18557 entry concerns the WordPress plugin bws-google-maps (BestWebSoft) prior to version 1.3.6, with multiple XSS issues. The connected nuclei template confirms the vulnerability is Cross-Site Scripting and that exploitation would allow authenticated attackers to execute arbitrary Ja...

CVE-2017-18556

The CVE pertains to the WordPress plugin bws-google-analytics (pre-1.7.1). The connected Nuclei template confirms multiple XSS flaws in the plugin before 1.7.1, enabling authenticated attackers to inject and execute arbitrary JavaScript in victims’ browsers (potential cookie/credentials leakage a...

CVE-2017-18556

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

CVE-2017-18556: Improper Neutralization of Input During Web Page Generation

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

WordPress bws-google-analytics plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...