4 matches found
WP App Maker 1.0.16.4 - icons-launcher.php uid Parameter Reflected XSS
The wp-app-maker WordPress plugin was affected by an icons-launcher.php uid Parameter Reflected XSS security vulnerability...
CVE-2014-4578
Cross-site scripting XSS vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
PT-2014-5992
Name of the Vulnerable Software and Affected Versions WP App Maker plugin versions 1.0.16.4 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the uid parameter in the asset-studio/icons-launcher.php file...
CVE-2014-4578: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...