9 matches found
WordPress Web-Dorado Instagram Feed WD plugin cross-site scripting vulnerability (CNVD-2018-08291)
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Web-Dorado Instagram Feed WD plugin is a social media content sharing plugin used in ... A cross-site scripting...
CVE-2018-10301
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...
CVE-2018-10300
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...
CVE-2018-10300
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...
CVE-2018-10301
CVE-2018-10301 : Cross-site scripting in the WordPress plugin WD Instagram Feed Premium (Web-Dorado) for WordPress. The vulnerability exists before version 1.3.1 and allows remote attackers to inject arbitrary script/HTML by submitting payloads in comments on an Instagram post. Impact is XSS in p...
PT-2018-2466
Name of the Vulnerable Software and Affected Versions Web-Dorado Instagram Feed WD plugin versions prior to 1.3.1 Description The issue is related to a lack of protection against web page structure manipulation. It allows a remote attacker to inject arbitrary web scripts or HTML code by passing...
CVE-2018-10300: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...
PT-2018-9810
Name of the Vulnerable Software and Affected Versions: Web-Dorado Instagram Feed WD plugin versions prior to 1.3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio, which is a cross-site scripting XSS...
CVE-2018-10301: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...