7 matches found
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2022-2423
The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress promobar plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. promobar is a plugin used in it to add page banners with timing features. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
CVE-2017-18529
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues...
PT-2019-8463
Name of the Vulnerable Software and Affected Versions WordPress promobar plugin versions prior to 1.1.1 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...