WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. id: CVE-2014-4558 info: name: WooCommerce Swipe = 2.7.1 - Cross-Site...

EUVD-2014-4484

Malware in sbrugna...

EUVD-2014-4486

Malware in sbrugna...

WordPress Swipe Checkout for WooCommerce Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Swipe Checkout for WooCommerce is a payment plugin for e-commerce used in it. A cross-site scripting vulnerability exists in the...

WordPress Swipe Checkout for WP e-Commerce Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Swipe Checkout for WP e-Commerce is an online payment plugin for e-commerce sites. A cross-site scripting vulnerability exists in...

CVE-2014-4558

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

CVE-2014-4559

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

CVE-2014-4559

CVE-2014-4559 is an XSS vulnerability in the Swipe Checkout for WP e-Commerce plugin (WordPress) affecting test-plugin.php, version 3.1.0 and earlier. The issue allows remote injection of arbitrary script/HTML via the parameters api_key, payment_page_url, merchant_id, api_url, or currency. Connec...

PT-2019-7118

Name of the Vulnerable Software and Affected Versions Swipe Checkout for WP e-Commerce plugin versions 3.1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the api key, payment page url, merchant id, api url, or currency parameter in the...

CVE-2014-4559: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

CVE-2014-4558: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

PT-2019-7117

Name of the Vulnerable Software and Affected Versions Swipe Checkout for WooCommerce plugin versions 2.7.1 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the api url parameter. Recommendations For Swipe Checkout for...

Cross site scripting

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop swipe-hq-checkout-for-jigoshop plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

PT-2014-5976

Name of the Vulnerable Software and Affected Versions Swipe Checkout for Jigoshop plugin versions 3.1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the api url parameter...

CVE-2014-4557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop swipe-hq-checkout-for-jigoshop plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

The CVE-2014-4556 entry concerns the WordPress Swipe Checkout for eShop plugin (versions 3.7.0 and earlier), where a Cross-Site Scripting (XSS) vulnerability exists in test-plugin.php. The underlying issue is that the api_url parameter can be used by remote attackers to inject arbitrary web scrip...