CVE-2016-11005

The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?clientid= XSS...

CVE-2016-11005: Improper Neutralization of Input During Web Page Generation

The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?clientid= XSS...

PT-2019-7798

Name of the Vulnerable Software and Affected Versions instalinker plugin versions prior to 1.1.2 Description The issue concerns a problem with the instalinker plugin, where the includes/instalinker-admin-preview.php endpoint is vulnerable to XSS attacks when the client id parameter is used...

WordPress Instagram 1.1.0 Cross Site Scripting

Exploit Title : WordPress Instagram Plugin 1.1.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/ Software Link : https://wordpress.org/plugins/instalinker/ Date: 2016/02/04 Version : 1.1.0 Vulnerable code : File Name: instalinker-admin-preview.php...

Directory traversal

Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the theme parameter...

CVE-2011-5210: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the theme parameter...

PT-2012-2187

Name of the Vulnerable Software and Affected Versions Limny version 3.0.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by providing a ..%2F encoded dot dot slash in the theme parameter of the admin/preview.php file...