156 matches found
WordPress NewStatPress Plugin < 1.0.4 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2017-18575
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
CVE-2017-18575
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
Cross site scripting
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
CVE-2017-18575
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
CVE-2017-18575
CVE-2017-18575 affects the WordPress plugin NewStatPress prior to version 1.2.5. The issue is multiple stored XSS flaws in the plugin, where unsanitized user-supplied data can be stored and later reflected in pages, enabling injection of client-side scripts. Public exploitation details are not pr...
CVE-2017-18575
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
CVE-2017-18575: Improper Neutralization of Input During Web Page Generation
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...
PT-2019-8509
Name of the Vulnerable Software and Affected Versions newstatpress plugin versions prior to 1.2.5 Description The issue concerns multiple stored XSS problems. Recommendations For versions prior to 1.2.5, update to version 1.2.5 or later to resolve the issue...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30376)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
WordPress newstatpress plugin SQL injection vulnerability (CNVD-2019-30377)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A SQL injection vulnerability exists in the WordPress...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30372)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30373)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
CVE-2015-9315
The newstatpress plugin before 1.0.1 for WordPress has SQL injection...
CVE-2015-9312
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...
CVE-2015-9311
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...
CVE-2015-9313
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element...
CVE-2015-9314
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...