EUVD-2017-9677

Malware in sbrugna...

CVE-2017-18561

The embed-comment-images plugin before 0.6 for WordPress has XSS...

WordPress embed-comment-images plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. embed-comment-images is a plugin that supports embedding image links in comments. A cross-site scripting vulnerability exists in the...

CVE-2017-18561

The embed-comment-images plugin before 0.6 for WordPress has XSS...

CVE-2017-18561

The CVE-2017-18561 entry concerns the WordPress plugin embed-comment-images with an XSS vulnerability in versions before 0.6. Connected sources consistently describe Cross-Site Scripting in this plugin, evidenced by references noting XSS and a PoC demonstrating an image tag-based vector (e.g., un...

CVE-2017-18561

The embed-comment-images plugin before 0.6 for WordPress has XSS...

CVE-2017-18561: Improper Neutralization of Input During Web Page Generation

The embed-comment-images plugin before 0.6 for WordPress has XSS...

PT-2019-8495

Name of the Vulnerable Software and Affected Versions WordPress embed-comment-images plugin versions prior to 0.6 Description The issue allows for cross-site scripting XSS attacks. Recommendations For versions prior to 0.6, update the embed-comment-images plugin to version 0.6 or later to resolve...