100 matches found
CVE-2015-4413
Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...
CVE-2015-4413
Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...
CVE-2015-4413
The CVE-2015-4413 entry concerns the Nextend Facebook Connect WordPress plugin. A Cross-Site Scripting (XSS) vulnerability exists in the new_fb_sign_button function in nextend-facebook-connect.php that allows injection of arbitrary web script or HTML via the redirect_to parameter. Affected versio...
CVE-2015-4413: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the newfbsignbutton function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter...
PT-2015-6581
Name of the Vulnerable Software and Affected Versions Nextend Facebook Connect plugin versions prior to 1.5.6 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the redirect to parameter in the new fb...
Nextend Facebook Connect <= 1.5.4 - Reflected Cross-Site Scripting (XSS)
The Nextend Social Login and Register WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
Nextend Twitter Connect <= 1.5.1 - Reflected Cross-Site Scripting (XSS)
The nextend-twitter-connect WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Nextend Twitter Connect 1.5.1 Cross Site Scripting
Wordpress Nextend Twitter Connect =================================== Document Title: =============== WordPress Nextend Twitter Connect Plugin Version: 1.5.1 is vulnerable to Reflected XSS Cross Site Scripting Download URL: ============= https://wordpress.org/plugins/nextend-twitter-connect/...
CVE-2014-8800
Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...
Cross site scripting
Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...
CVE-2014-8800
Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...
CVE-2014-8800
Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...
CVE-2014-8800
CVE-2014-8800 is a cross-site scripting (XSS) vulnerability in the Nextend Facebook Connect WordPress plugin prior to 1.5.1. The issue affects nextend-facebook-settings.php via the fb_login_button parameter in a newfb_update_options action, enabling remote injection of arbitrary HTML/script. Publ...
CVE-2014-8800: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...
PT-2014-8736
Name of the Vulnerable Software and Affected Versions Nextend Facebook Connect plugin versions prior to 1.5.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the fb login button...
WordPress Nextend Facebook Connect Plugin 1.4.59 - XSS
Because of a cross-site scripting vulnerability in Nextend Facebook Connect plugin, anyone can change plugin settings. Solution Update the plugin to version 1.5.1...
WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting
WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting Exploit Title: Nextend Facebook Connect 1.4.59 XSS Date: 16-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...
WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting
Exploit Title: Nextend Facebook Connect 1.4.59 XSS Date: 16-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/nextend-facebook-connect.1.4.59.zip Category: webapps CVE: CVE-2014-8800 1...
Nextend Facebook Connect <= 1.4.59 - Cross-Site Scripting (XSS)
The Nextend Social Login and Register WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...