WordPress Plugin OneSignal 1.17.5 - subdomain Persistent Cross-Site Scripting

WordPress Plugin OneSignal 1.17.5 - subdomain Persistent Cross-Site Scripting Exploit Title: WordPress Plugin OneSignal 1.17.5 - Persistent Cross-Site Scripting Date: 2019-07-18 Vendor Homepage: https://www.onesignal.com Software Link:...

OneSignal Web Push Notifications - Stored XSS

The OneSignal – Web Push Notifications WordPress plugin was affected by a Stored XSS security vulnerability...

onesignal.com Open Redirect vulnerability

Vulnerable URL: https://onesignal.com/sdks/safariNotificationOpened?params="i"%3A"970772a8-351b-4577-ba9f-c269b59d8253"%2C"u"%3A"http%3A%2F%2Fwww.openbugbounty.org"%2C"userid"%3A"402cc904-3308-43ce-a9f6-c0b475852475" Details: Description| Value ---|--- Patched:| No Latest check for patch:|...