PT-2018-4380

Name of the Vulnerable Software and Affected Versions Nextend Twitter Connect plugin versions prior to 1.5.2 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the new Twitter sign button function in the nextend-Twitter-connect.php file. The vulnerability...

CVE-2015-4557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...