EUVD-2013-2447

Malware in sbrugna...

Terillion Reviews < 1.2 - Profile Id Field XSS

The terillion-reviews WordPress plugin was affected by a Profile Id Field XSS security vulnerability...

CVE-2013-2501

Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...

CVE-2013-2501

CVE-2013-2501 affects the Terillion Reviews WordPress plugin, specifically versions before 1.2. The vulnerability is a reflected/stored XSS via the ProfileId field in the plugin’s UI, allowing remote attackers to inject arbitrary HTML/script. Impact is an XSS risk in sites running the affected pl...

CVE-2013-2501

Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...

CVE-2013-2501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...

Stored XSS in Terillion Reviews Wordpress Plugin

CVE Assigned-CVE-2013-2501 Exploit Title : Stored XSS in Terillion Reviews Plugin Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 08/03/13 Software link: http://wordpress.org/extend/plugins/terillion-reviews/ The Terillion Reviews Plugin in Wordpress...

WordPress Terillion Reviews Cross Site Scripting

CVE Assigned-CVE-2013-2501 Exploit Title : Stored XSS in Terillion Reviews Plugin Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 08/03/13 Software link: http://wordpress.org/extend/plugins/terillion-reviews/ The Terillion Reviews Plugin in Wordpress...

WordPress Terillion Reviews Plugin - HTML Injection Vulnerability

WordPress Terillion Reviews plugin is prone to an HTML-injection vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

WordPress Plugin Terillion Reviews - Profile Id HTML Injection

source: https://www.securityfocus.com/bid/58415/info The Terillion Reviews plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied...

WordPress Plugin Terillion Reviews - Profile Id HTML Injection

WordPress Plugin Terillion Reviews - Profile Id HTML Injection source: https://www.securityfocus.com/bid/58415/info The Terillion Reviews plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

WordPress Terillion Reviews Plugin <= 1.1 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the ProfileId field. Solution Update the plugin...