WordPress Tagregator 0.6 Cross Site Scripting

Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting Date: 2018-05-05 Exploit Author: ManhNho Vendor Homepage: https://wordpress.org/plugins/tagregator/ Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip Ref: https://pastebin.com/ZGr5tyP2 Version: 0.6 Tested...

WordPress Tagregator 0.6 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting Exploit Author: ManhNho Vendor Homepage: https://wordpress.org/plugins/tagregator/ Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip Ref:...

CVE-2018-10752

The CVE-2018-10752 entry concerns WordPress Tagregator plugin version 0.6, where a Stored XSS vulnerability exists in the Add New action’s title field. The root cause is inadequate input sanitization/escaping for the title, enabling an attacker with access to the admin interface to inject script ...