EUVD-2016-1072

Malware in sbrugna...

Wordpress anti-plagiarism plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. anti-plagiarism is one of the free online plagiarism checking plugin. A cross-site scripting vulnerability exists in version 3....

CVE-2016-1000128

Reflected XSS in wordpress plugin anti-plagiarism v3.60...

CVE-2016-1000128

Reflected XSS in wordpress plugin anti-plagiarism v3.60...

Cross site scripting

Reflected XSS in wordpress plugin anti-plagiarism v3.60...

CVE-2016-1000128

Reflected XSS in wordpress plugin anti-plagiarism v3.60...

CVE-2016-1000128

The CVE affects WordPress Anti Plagiarism plugin (versions 3.60 or apply vendor-provided security patches. If exploiting details are available in connected docs, they confirm reflected XSS and a need for patching; otherwise, details remain consistent with the CVE and related advisories.

WordPress Anti Plagiarism Plugin <= 3.60 - Cross-Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because the variable "m" appears to send unsanitized data back to the users browser. Solution Update the plugin...

anti-plagiarism <= 3.60 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The anti-plagiarism WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/anti-plagiarism/js.php?m=""...

anti-plagiarism <= 3.60 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The anti-plagiarism WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/anti-plagiarism/js.php?m="alert1;"...

WordPress Anti Plagiarism Plugin <= 3.60 - Cross-Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because the variable "m" appears to send unsanitized data back to the users browser. Solution Update the plugin...