PT-2022-9667

Name of the Vulnerable Software and Affected Versions WHMCS Bridge WordPress plugin versions prior to 6.4b Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the error parameter is not properly sanitized and escaped before being outputted back in the admin...

CVE-2021-25112: Improper Neutralization of Input During Web Page Generation

The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2021-4074: Improper Neutralization of Input During Web Page Generation

The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the ccwhmcsbridgeurl parameter found in the /whmcs-bridge/bridgecp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1. Due to missing authorization checks on the...

PT-2022-11308

Name of the Vulnerable Software and Affected Versions WHMCS Bridge WordPress plugin versions up to and including 6.1 Description The issue allows attackers to inject arbitrary web scripts via the cc whmcs bridge url parameter in the /whmcs-bridge/bridge cp.php file. This is due to missing...