8 matches found
CVE-2018-10300
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...
CVE-2018-10301
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...
CVE-2018-10301
CVE-2018-10301 : Cross-site scripting in the WordPress plugin WD Instagram Feed Premium (Web-Dorado) for WordPress. The vulnerability exists before version 1.3.1 and allows remote attackers to inject arbitrary script/HTML by submitting payloads in comments on an Instagram post. Impact is XSS in p...
PT-2018-2466
Name of the Vulnerable Software and Affected Versions Web-Dorado Instagram Feed WD plugin versions prior to 1.3.1 Description The issue is related to a lack of protection against web page structure manipulation. It allows a remote attacker to inject arbitrary web scripts or HTML code by passing...
CVE-2018-10300: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...
PT-2018-9810
Name of the Vulnerable Software and Affected Versions: Web-Dorado Instagram Feed WD plugin versions prior to 1.3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio, which is a cross-site scripting XSS...
CVE-2018-10301: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post...