EUVD-2017-18272

Malware in sbrugna...

EUVD-2016-5794

Malware in sbrugna...

Cross site scripting

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

CVE-2016-4812

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4812

The CVE-2016-4812 has concrete details: the WordPress plugin Markdown on Save Improved is affected by a stored XSS vulnerability in versions up to 2.5.1, allowing remote attackers to run arbitrary scripts via unspecified vectors. Exploitation is documented in multiple sources (NVD, JVN, CVE lists...

JVN#26026353: WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting

The WordPress plugin "Markdown on Save Improved" contains a stored cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. While the...