3 matches found
WordPress Knews Plugin <= 1.2.5 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Knews 1.2.5 - Unspecified XSS
The Knews Multilingual Newsletters WordPress plugin was affected by an Unspecified XSS security vulnerability...
WordPress Knews Plugin 1.1.0 - Cross Site Scripting #1
WordPress Knews Multilingual Newsletters plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...