5 matches found
WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting Detection
WordPress enhanced-tooltipglossary 3.2.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...
CVE-2016-1000132
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8...
Cross site scripting
Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8...
CVE-2016-1000132
Affected software: WordPress enhanced-tooltipglossary plugin (v3.2.8) on WordPress. Vulnerability: Reflected cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary script in the victim’s browser within the site context. Root cause / details: Unescaped/unsanitized in...