7 matches found
CVE-2017-18598
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php...
CVE-2017-18598
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php...
Design/Logic Flaw
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php...
CVE-2017-18598
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php...
CVE-2017-18598: Improper Neutralization of Input During Web Page Generation
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php...
PT-2019-8529
Name of the Vulnerable Software and Affected Versions Qards plugin for WordPress versions through 2017-10-11 Description The issue allows for XSS via a remote document specified in the url parameter to "html2canvasproxy.php" API endpoint. Recommendations For Qards plugin for WordPress versions...
Qards - Server Side Request Forgery (SSRF)
Google Dork: inurl:"plugins/qards" Qards provides you easy option to drag and edit every part and element of your site in the front-end, you will never have to write any code to change the layout or to change any part of the site like the traditional WordPress way. PoC The vulnerable script...