CVE-2016-10974

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

EUVD-2016-1965

Malware in sbrugna...

EUVD-2016-1966

Malware in sbrugna...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10974

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10975

The CVE-2016-10975 entry concerns the Fluid Responsive Slideshow WordPress plugin (pre-2.2.7). It describes a reflected XSS vulnerability via the skin parameter, with partial integrity impact and no confidentiality/availability impact per the NVD CVSS data, and with user interaction required in t...

CVE-2016-10974

The CVE-2016-10974 vulnerability affects the Fluid Responsive Slideshow WordPress plugin prior to version 2.2.7, where the frs_save CSRF flaw enables stored XSS. Red Hat and CVE records corroborate the issue as a CSRF-related stored XSS in the plugin for WordPress. The weakness arises in the frs_...

CVE-2016-10974: Cross-Site Request Forgery (CSRF)

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

CVE-2016-10975: Improper Neutralization of Input During Web Page Generation

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

PT-2019-7768

Name of the Vulnerable Software and Affected Versions fluid-responsive-slideshow plugin versions prior to 2.2.7 Description The issue is related to reflected XSS, which occurs via the skin parameter. This allows for potential malicious script injection and execution. Recommendations For versions...

PT-2019-7767

Name of the Vulnerable Software and Affected Versions fluid-responsive-slideshow plugin versions prior to 2.2.7 Description The issue concerns a CSRF vulnerability that leads to stored XSS. This occurs in the frs save function, allowing for malicious input to be stored and executed. Recommendatio...

Uber: CSRF on eng.uber.com may lead to server-side compromise

The site eng.uber.com uses a WordPress plugin called Fluid Responsive Slideshow. The plugin doesn't implement any CSRF check for AJAX requests. Some of these AJAX requests can be used to modify posts and pages on the system. An attacker could use this bug to inject arbitrary JavaScript in any pag...