XSS in WPTouch wordpress plugin

Vulnerability ID: HTB22698 Reference: http://www.htbridge.ch/advisory/xssinwptouchwordpressplugin.html Product: WPTouch wordpress plugin Vendor: BraveNewCode Inc http://www.bravenewcode.com/ Vulnerable Version: 1.9.19.4 Vendor Notification: 16 November 2010 Vulnerability Type: XSS Cross Site...

Cross-site Scripting (XSS) Vulnerability in WPTouch Wordpress Plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WPTouch Wordpress Plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WPTouch Wordpress Plugin: CVE-2010-4779 The vulnerability exists due to input sanitation...

Immunity Canvas: WPTOUCH_NONCE

Name| wptouchnonce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WPTouch Nonce Notes| CVE Name: CWE-434 VENDOR: BraveNewCode Changelog: https://wordpress.org/plugins/wptouch/changelog/ Notes: Vulnerable versions are 3.x = 3.4.2 This is a post authentication shell upload vulnerability in ...