Cross site scripting

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-4625

Name of the Vulnerable Software and Affected Versions Cyber-Will Social-button Premium plugin version 1.1 and earlier for EC-CUBE 2.13.x Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendatio...