CVE-2022-3908

Summary of CVE-2022-3908 – WordPress Helloprint plugin : The Helloprint WordPress plugin (versions before 1.4.7) is vulnerable to a reflected Cross-Site Scripting (XSS) due to the plugin not sanitizing and escaping a parameter before echoing it on the page. This flaw can allow an attacker to inje...

WordPress plugin Helloprint 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Helloprint < 1.4.7 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=language-translate.php&success=added"alertXSS...

helloprint.nl Cross Site Scripting vulnerability OBB-1217205

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...