5 matches found
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
Design/Logic Flaw
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
CVE-2017-18612: Improper Neutralization of Input During Web Page Generation
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
PT-2019-8543
Name of the Vulnerable Software and Affected Versions wp-whois-domain plugin version 1.0.0 Description The issue concerns a problem with the wp-whois-domain plugin for WordPress, where there is a potential for XSS via the domain parameter in the "pages/func-whois.php" endpoint. Recommendations Fo...