CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465: Improper Neutralization of Input During Web Page Generation

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

PT-2018-17562

Name of the Vulnerable Software and Affected Versions PropertyHive plugin versions prior to 1.4.15 Description The issue allows for XSS via the body parameter to the "includes/admin/views/html-preview-applicant-matches-email.php" endpoint. Recommendations For versions prior to 1.4.15, update to...