CVE-2016-10982

The kento-post-view-counter WordPress plugin (up to version 2.8) has a CSRF vulnerability in wp-admin/admin.php?page=kentopvc_settings. This affects the plugin’s settings page and could enable unauthorized actions when a user interacts with the UI. The provided documents do not include a patch ve...

CVE-2016-10981

CVE-2016-10981 affects the kento-post-view-counter WordPress plugin (up to version 2.8). The vulnerability is stored XSS triggered through the fields kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. Attack context is network access with no required authentication and user in...

CVE-2016-10980

CVE-2016-10980 affects the WordPress plugin kento-post-view-counter up to version 2.8. The vulnerability is an XSS via the parameter kento_pvc_geo. Multiple connected sources corroborate the XSS vector, with additional notes from WPVulnDB indicating CSRF and multiple XSS vectors in the same plugi...

CVE-2016-10980

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

Wordpress kento-post-view-counter 插件 存储型 XSS

No description provided by source...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

WordPress Kento Post View Counter 2.8 CSRF / Cross Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin can lead to huge damage of the website, as the two...

WordPress Kento Post View Counter Plugin 2.8 - Multiple Vulnerabilities

Kento Post View Counter plugin is prone to multiple CSRF and XSS vulnerabilities. It allows an attacker to attack almost all the pages of the website and execute malicious JavaScript payload on all clients that are visiting that website. Solution Upgrade the plugin...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin can lead to huge damage of the website, as the two...