3 matches found
CVE-2016-11005
The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?clientid= XSS...
CVE-2016-11005
The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?clientid= XSS...
CVE-2016-11005
The CVE-2016-11005 entry refers to the InstaLinker WordPress plugin (before 1.1.2). Affected component: includes/instalinker-admin-preview.php. Root cause: insufficient input sanitization of client_id leads to a reflected XSS vulnerability. Impact: could execute arbitrary script in a user’s brows...