WordPress Pootle Button Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Pootle Button plugin is one of the Pootle button plugin. A cross-site scripting vulnerability exists in WordPress...

PT-2017-14241

Name of the Vulnerable Software and Affected Versions Pootle Button plugin versions prior to 1.2.0 Description The issue allows for XSS exploitation via the assets url parameter in "assets/dialog.php", which can be accessed through the "/wp-admin/admin-ajax.php" API endpoint. Recommendations For...

WordPress Pootle Button 1.1.1 Cross Site Scripting

Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable Pootle button plugin 1.1.1 Pootle button plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...