6 matches found
CVE-2023-41797
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...
WordPress SoundCloud Is Gold Plugin <= 2.3.1 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Cross site scripting
Cross-site scripting XSS vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter in a soundcloudisgoldplayerpreview action to wp-admin/admin-ajax.php...
CVE-2012-6624
The CVE concerns the SoundCloud Is Gold WordPress plugin (v2.1) where a Cross-Site Scripting (XSS) flaw exists in the width parameter of the soundcloud_is_gold_player_preview action to wp-admin/admin-ajax.php. This allows remote attackers to inject arbitrary script/HTML in the context of affected...
PT-2014-2393
Name of the Vulnerable Software and Affected Versions SoundCloud Is Gold plugin version 2.1 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via the width parameter in a soundcloud is gold player preview action to the "/wp-admin/admin-ajax.php" AP...
WordPress Plugin Soundcloud Is Gold 2.1 - width Cross-Site Scripting
WordPress Plugin Soundcloud Is Gold 2.1 - width Cross-Site Scripting source: https://www.securityfocus.com/bid/53537/info The Soundcloud Is Gold plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverag...