4 matches found
CVE-2019-25140: Improper Neutralization of Input During Web Page Generation
The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logowidth, logoheight, rcsplogourl, homeseclinktxt, rcspheadline and rcspdescription parameters in versions up to, and including, 1.8.1 due to insufficient input sanitizatio...
CVE-2018-5661
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...
Design/Logic Flaw
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...
CVE-2018-5661: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...