Hardcoded credentials

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

PropertyHive WordPress plugin versions ≤1.4.14 are affected by a Cross-Site Scripting (XSS) vulnerability in the body parameter of includes/admin/views/html-preview-applicant-matches-email.php. Root cause: improper handling of the body parameter leads to script execution in the context of a victi...

CVE-2018-6465: Improper Neutralization of Input During Web Page Generation

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

PropertyHive <= 1.4.14 - Cross-Site Scripting (XSS)

The PropertyHive WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Propertyhive 1.4.14 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Propertyhive 1.4.14 Propertyhive is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...