95 matches found
WordPress bws-google-analytics plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...
CVE-2017-18558: Improper Neutralization of Input During Web Page Generation
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...
CVE-2017-18516: Improper Neutralization of Input During Web Page Generation
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues...
CVE-2017-18530
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18530
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
Cross site scripting
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...
Cross site scripting
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18530
CVE-2017-18530 covers the WordPress rating-bws plugin prior to version 0.2, which contains multiple cross-site scripting (XSS) flaws. The core issue is insufficient validation of client-side data, enabling an attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing sess...
CVE-2017-18530
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...
CVE-2017-18517
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...
CVE-2017-18517
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...
Cross site scripting
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...
CVE-2017-18518
The CVE-2017-18518 entry concerns the WordPress plugin bws-smtp (BestWebSoft) before version 1.1.0 , which has multiple XSS vulnerabilities. The connected nuclei template confirms the vulnerability is a cross-site scripting issue affecting that plugin. The impact stated in the connected document ...
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18517
CVE-2017-18517 affects the WordPress plugin bws-pinterest prior to version 1.0.5 from the vendor BestWebSoft. The connected document set describes multiple Cross-Site Scripting (XSS) issues in this plugin, enabling an attacker to execute arbitrary JavaScript in victims’ browsers. The Nuclei templ...
CVE-2017-18517
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...