Design/Logic Flaw

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

CVE-2018-5214: Improper Neutralization of Input During Web Page Generation

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

PT-2018-16806

Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...

WordPress Add Link to Facebook Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. add Link to Facebook is one of the plugin to automatically add links to Facebook. An HTML injection vulnerability exists in the WordPress Add Link to...

Add Link To Facebook <= 1.215 - Cross Site Scripting (XSS)

The add-link-to-facebook WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...