BetterDocs < 1.9.0 - Reflected Cross-Site Scripting

The plugin does not escape the tagID before outputting it back in the edit category page of the admin dashboard, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/term.php?taxonomy=doccategory&tagID=147"alert/XSS/...

PT-2018-17267

Name of the Vulnerable Software and Affected Versions: Gallery WD version 1.3.6 Description: A SQL Injection issue exists in the Gallery WD component for Joomla!, which can be exploited via the tag id parameter or the gallery id parameter. Recommendations: For Gallery WD version 1.3.6, avoid usin...

PT-2017-12815

Name of the Vulnerable Software and Affected Versions Photo Gallery by WD - Responsive Photo Gallery versions prior to 1.3.51 Description The issue is related to a SQL injection vulnerability. It is associated with the bwg edit tag function in photo-gallery.php and the edit tag function in...