CVE-2019-16524

The easy-fancybox plugin before 1.8.18 for WordPress aka Easy FancyBox is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter...

CVE-2019-16524: Improper Neutralization of Input During Web Page Generation

The easy-fancybox plugin before 1.8.18 for WordPress aka Easy FancyBox is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter...

PT-2019-14686

Name of the Vulnerable Software and Affected Versions Easy FancyBox versions prior to 1.8.18 Description The issue arises from improper encoding of arbitrarily submitted settings parameters in the Settings Menu, specifically in the inc/class-easyfancybox.php file. This leads to Stored XSS due to...