3 matches found
CVE-2013-7472: Improper Neutralization of Input During Web Page Generation
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...
6.1CVSS5.8AI score0.00984EPSS
SaveExploits1References2
PT-2019-7021
Name of the Vulnerable Software and Affected Versions Count per Day plugin versions prior to 3.2.6 Description The issue allows for XSS exploitation via the daytoshow parameter in the /wp-admin/?page=cpd metaboxes API endpoint. Recommendations For versions prior to 3.2.6, update to version 3.2.6 ...
6.1CVSS0.00984EPSS
SaveExploits1References5
20