CVE-2016-10980

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

CVE-2016-10980

CVE-2016-10980 affects the WordPress plugin kento-post-view-counter up to version 2.8. The vulnerability is an XSS via the parameter kento_pvc_geo. Multiple connected sources corroborate the XSS vector, with additional notes from WPVulnDB indicating CSRF and multiple XSS vectors in the same plugi...