CVE-2015-20019

The CVE-2015-20019 entry concerns the WordPress Content text slider on post plugin, affected in versions before 6.9. The vulnerability arises from insufficient sanitization/escaping of the Title and Message/Content fields, enabling Cross-Site Scripting (XSS). Practical impact is cross-site script...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin Content text slider, which stems...

WordPress Content text slider on post plugin <= 6.8 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by ALIREZAPROMIS in WordPress Content text slider on post plugin versions = 6.8. Solution Update the WordPress Content text slider on post plugin to the latest available version at least 6.9...

WordPress Content Text Slider On Post 6.8 Cross Site Scripting

Document Title: =============== Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...