CVE-2016-1000137

WordPress Hero Maps Pro plugin version 2.1.0 is affected by a reflected cross-site scripting (XSS) vulnerability. The Nuclei template documents a reflected XSS in Hero Maps Pro 2.1.0, allowing an attacker to execute arbitrary JavaScript in the victim’s browser in the context of the affected site....

CVE-2016-1000137: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

PT-2016-4529

Name of the Vulnerable Software and Affected Versions hero-maps-pro version 2.1.0 Description The issue is related to a Reflected XSS in the hero-maps-pro wordpress plugin. Recommendations For hero-maps-pro version 2.1.0, update to a newer version that contains a fix for this issue...

Hero Maps Pro <= 2.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hero-maps-pro WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v="alert1;"...

WordPress Hero Maps Pro plugin <= 2.1.0 - Cross Site-Scripting (XSS) vulnerability

Cross Site-Scripting XSS vulnerability discovered by Larry W. Cashdollar in WordPress Hero Maps Pro plugin versions = 2.1.0. Solution Plugin closed. Deactivate and delete...

Rock Hero - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Rock Hero published at the 'play' market has multiple vulnerabilities...

Pet Shelter Hero - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Pet Shelter Hero published at the 'play' market has multiple vulnerabilities...

Avatar Hero : Create Manga - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avatar Hero : Create Manga published at the 'play' market has multiple vulnerabilities...

Super Hero Dog - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Super Hero Dog published at the 'play' market has multiple vulnerabilities...

Hangman Hero - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Hangman Hero published at the 'play' market has multiple vulnerabilities...

Super Hero Quiz - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Super Hero Quiz published at the 'play' market has multiple vulnerabilities...

HERO WARS - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application HERO WARS published at the 'play' market has multiple vulnerabilities...

Punch Hero - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Punch Hero published at the 'play' market has multiple vulnerabilities...

Soccer Hero - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Soccer Hero published at the 'play' market has multiple vulnerabilities...

Firefighter 3D: The City Hero - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Firefighter 3D: The City Hero published at the 'play' market has multiple vulnerabilities...

Chaos Battle Hero - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Chaos Battle Hero published at the 'play' market has multiple vulnerabilities...

Dungeon & Pixel Hero(RetroRPG) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dungeon & Pixel HeroRetroRPG published at the 'play' market has multiple vulnerabilities...

Timing Hero - Certificates or keys found, Dynamic Code Loading, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Timing Hero published at the 'play' market has multiple vulnerabilities...

Hero Saga - Anime Melee Game - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Hero Saga - Anime Melee Game published at the 'play' market has multiple vulnerabilities...

Dance Hero Türkiye - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Dance Hero Türkiye published at the 'play' market has multiple vulnerabilities...