EUVD-2014-6199

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 callback, 2 dir, or 3 extensions parameter in an addImages action to wp-admin/admin-ajax.php...

CVE-2014-6315

CVE-2014-6315 concerns the WordPress plugin Photo Gallery (Web-Dorado) up to version 1.1.30. The vulnerability is a set of Cross-Site Scripting (XSS) flaws exposed via three HTTP GET/parameters to wp-admin/admin-ajax.php: callback, dir, and extensions. The root cause is insufficient sanitization ...

CVE-2014-6315

Multiple cross-site scripting XSS vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 callback, 2 dir, or 3 extensions parameter in an addImages action to wp-admin/admin-ajax.php...

PT-2014-7148

Name of the Vulnerable Software and Affected Versions Web-Dorado Photo Gallery plugin versions 1.1.30 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in an addImages action to "wp-admin/admin-ajax.php" API endpoint. The...

CVE-2014-6315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 callback, 2 dir, or 3 extensions parameter in an addImages action to wp-admin/admin-ajax.php...