CVE-2016-10980

CVE-2016-10980 affects the WordPress plugin kento-post-view-counter up to version 2.8. The vulnerability is an XSS via the parameter kento_pvc_geo. Multiple connected sources corroborate the XSS vector, with additional notes from WPVulnDB indicating CSRF and multiple XSS vectors in the same plugi...

CVE-2016-10980

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

PT-2019-7775

Name of the Vulnerable Software and Affected Versions kento-post-view-counter plugin versions prior to 2.8 Description The issue concerns a CSRF problem in the kento-post-view-counter plugin for WordPress, specifically affecting the wp-admin/admin.php?page=kentopvc settings page. Recommendations...

PT-2019-7774

Name of the Vulnerable Software and Affected Versions kento-post-view-counter plugin versions prior to 2.8 Description The issue concerns stored XSS, which can be triggered via the kento pvc numbers lang, kento pvc today text, or kento pvc total text variables. This allows for malicious script...

CVE-2016-10981: Improper Neutralization of Input During Web Page Generation

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...

PT-2019-7773

Name of the Vulnerable Software and Affected Versions kento-post-view-counter plugin versions prior to 2.9 Description The issue allows for XSS via kento pvc geo. Recommendations For versions prior to 2.9, update to version 2.9 or later to resolve the issue...

CVE-2016-10980: Improper Neutralization of Input During Web Page Generation

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

CVE-2016-10982: Cross-Site Request Forgery (CSRF)

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...

WordPress Kento Post View Counter Plugin 2.8 - CSRF/XSS

No description provided by source...

Wordpress kento-post-view-counter 插件 存储型 XSS

No description provided by source...

Multiple Vulnerabilities in the WordPress Kento Post View Counter Plugin

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The WordPress Kento Post View Counter plugin suffers from a cross-site request forgery vulnerability and a cross-site scripti...

WordPress Kento Post View Counter 2.8 CSRF / Cross Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin can lead to huge damage of the website, as the two...

WordPress Kento Post View Counter 2.8 Plugin - Cross-Site Request Forgery / Cross-Site Scripting

Exploit for php platform in category web applications I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin...

WordPress Kento Post View Counter Plugin 2.8 - Multiple Vulnerabilities

Kento Post View Counter plugin is prone to multiple CSRF and XSS vulnerabilities. It allows an attacker to attack almost all the pages of the website and execute malicious JavaScript payload on all clients that are visiting that website. Solution Upgrade the plugin...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin can lead to huge damage of the website, as the two...