4 matches found
CVE-2016-0770
Cross-site scripting XSS vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable...
CVE-2016-0770
Cross-site scripting XSS vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable...
CVE-2016-0770
Cross-site scripting XSS vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable...
CVE-2016-0770
Concrete details found: CVE-2016-0770 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Connections Business Directory, affecting versions prior to 8.5.9. The issue resides in includes/admin/pages/manage.php where unsanitized input from the s parameter can be echoed back, enab...