126 matches found
CVE-2018-5214
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
PT-2018-16806
Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...
CVE-2018-5214: Improper Neutralization of Input During Web Page Generation
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
CVE-2017-10673
admin/profile.php in GetSimple CMS 3.x has XSS in a name field...
PT-2017-11426
Name of the Vulnerable Software and Affected Versions GetSimple CMS versions 3.x Description The issue is related to a name field in the admin/profile.php file, which has XSS. Recommendations For GetSimple CMS versions 3.x, update to a version that includes a fix for this issue, or as a temporary...