6 matches found
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2022-2423
The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress promobar plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. promobar is a plugin used in it to add page banners with timing features. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...