CVE-2018-17946: Improper Neutralization of Input During Web Page Generation

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter...

PT-2018-14290

Name of the Vulnerable Software and Affected Versions Tribulant Slideshow Gallery plugin versions prior to 1.6.6.1 Description The issue allows for XSS attacks via specific parameters. The parameters id, method, Gallerymessage, Galleryerror, or Galleryupdated are vulnerable. Recommendations For...