Cross site scripting

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

CVE-2019-13463

CVE-2019-13463 describes an XSS vulnerability in the WordPress plugin Simple Link Directory (qcopd-shortcode-generator.php) prior to version 7.3.5. The root cause is that esc_html is not applied to the output statements, specifically echo get_the_title() and echo $term->name , allowing remote ...

CVE-2019-13463

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

Simple Link Directory < 7.3.5 - Cross-Site Scripting (XSS)

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the 'echo getthetitle' or 'echo $term-name' statement...