EUVD-2015-9312

Malware in sbrugna...

WordPress incoming-links plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. incoming-links is a plugin for adding inbound links. A cross-site scripting vulnerability exists in the WordPress incoming-links...

CVE-2015-9472

CVE-2015-9472 affects the WordPress incoming-links plugin prior to 0.9.10b, where referrers.php XSS is triggered via the Referer HTTP header. Multiple connected sources (NVD, RH, CNVD, CVE listings) confirm a cross-site scripting vulnerability in this plugin. Public details describe the flaw and ...