EUVD-2016-1084

Malware in sbrugna...

Wordpress new-year-firework plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. new-year-firework is one of the plug-ins for creating new campaigns. A cross-site scripting vulnerabilit...

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

Cross site scripting

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140

The CVE-2016-1000140 entry concerns the WordPress plugin New Year Firework, affected

New Year Firework <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The new-year-firework WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/new-year-firework/firework/index.php?text="alert1;"...