CVE-2015-5528

The CVE-2015-5528 entry concerns the WordPress Floating Social Bar plugin (pre-1.1.6). The XSS vulnerability arises in the save_order function within class-floating-social-bar.php, where the items[] parameter in the fsb_save_order action to wp-admin/admin-ajax.php is not properly filtered, allowi...

PT-2015-6973

Name of the Vulnerable Software and Affected Versions Floating Social Bar plugin versions prior to 1.1.6 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the save order function in the class-floating-social-bar.php file. Remote attackers can inject arbitrar...