EUVD-2014-2353

Malware in sbrugna...

Thank You Counter Button <= 1.8.2 - Cross-Site Scripting (XSS)

The Thank You Counter Button WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2014-2315

The CVE-2014-2315 entry concerns the WordPress plugin “Thank You Counter Button” (version 1.8.7) and is impacted by multiple stored XSS flaws. The vulnerability affects the parameters (thanks_caption, thanks_caption_style, thanks_style) passed to wp-admin/options.php, enabling remote attackers to...

CVE-2014-2315

Multiple cross-site scripting XSS vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 thankscaption, 2 thankscaptionstyle, or 3 thanksstyle parameter to wp-admin/options.php...

CVE-2014-2315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 thankscaption, 2 thankscaptionstyle, or 3 thanksstyle parameter to wp-admin/options.php...