CVE-2021-38351

The OSD Subscribe WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the osdsubscribemessage parameter found in the /options/osdsubscribeoptionssubscribers.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2.3...

PT-2021-22071

Name of the Vulnerable Software and Affected Versions OSD Subscribe WordPress plugin versions up to and including 1.2.3 Description The issue allows attackers to inject arbitrary web scripts via the osd subscribe message parameter found in the /options/osd subscribe options subscribers.php file,...