EUVD-2016-1976

Malware in sbrugna...

EUVD-2016-1975

Malware in sbrugna...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

Design/Logic Flaw

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...

CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

WordPress Echosign 1.1 Cross Site Scripting

FULL DISCLOSURE Product : Echosign Plugin Exploit Author : Rahul Pratap Singh Version :1.1 Home page Link : https://wordpress.org/plugins/echosign/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...

WordPress Echosign Plugin <= 1.1 - Reflected Cross Site Scripting

This plugin is prone to a reflected cross site scripting vulnerability, because "page" and "id" parameters are not sanitized. Solution There is no fix available...