EUVD-2013-3464

Malware in sbrugna...

reichelfuneralhome.com XSS vulnerability

Vulnerable URL: http://www.reichelfuneralhome.com/obits.php?hidecat=1"...

CVE-2013-3529

The CVE concerns the WP FuneralPress WordPress plugin, affecting version(s) before 1.1.7. The vulnerability is a Cross-Site Scripting (XSS) in the file path user/obits.php, where the parameters (message, photo-message, youtube-message) can be exploited to inject arbitrary script/HTML. Root cause:...

CVE-2013-3529: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 message, 2 photo-message, or 3 youtube-message parameter...

PT-2013-4459

Name of the Vulnerable Software and Affected Versions WP FuneralPress plugin versions prior to 1.1.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the message, photo-message...