WordPress Plugin Pz-LinkCard Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-30611

Name of the Vulnerable Software and Affected Versions Poporon Pz-LinkCard plugin versions prior to 2.4.9 Description The issue is related to a Cross-Site Request Forgery CSRF that can lead to Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performing unintende...

CVE-2023-47790: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF leading to Cross-Site Scripting XSS vulnerability in Poporon Pz-LinkCard plugin = 2.4.8 versions...

WordPress Pz-LinkCard Plugin <= 2.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Pz-LinkCard Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47790 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1f315cc56e29 Credits Le Ngoc Anh...

WordPress Pz-LinkCard plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

Cross site scripting

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012 Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25012

CVE-2021-25012 affects the WordPress Pz-LinkCard plugin up to version 2.4.4.4. The root cause is failure to sanitise/escape multiple parameters before returning them in admin dashboard pages, resulting in Reflected Cross-Site Scripting (XSS). Impact is reflected XSS in admin UI where untrusted in...

WordPress plugin Pz-LinkCard 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

PT-2022-9569

Name of the Vulnerable Software and Affected Versions Pz-LinkCard WordPress plugin versions prior to 2.4.4.5 Description The issue is related to Reflected Cross-Site Scripting, where multiple parameters are not properly sanitised and escaped before being outputted in admin dashboard pages...

CVE-2021-25012: Improper Neutralization of Input During Web Page Generation

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues...

WordPress Pz-LinkCard plugin <= 2.4.5.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Pz-LinkCard plugin versions = 2.4.5.2. Solution Update the WordPress Pz-LinkCard plugin to the latest available version at least 2.4.5.3...