WordPress RokStories Plugin - Multiple Security Vulnerabilities

WordPress RokStories plugin's "thumb.php" is prone to multiple security vulnerabilities, such as an arbitrary file-upload, cross-site scripting, information disclosure and denial-of-service vulnerabilities. Because of these issues, attackers can execute arbitrary script code in the browser of an...

WordPress GRAND Flash Album Gallery Plugin 1.71 - Cross Site Scripting

WordPress GRAND Flash Album Gallery plugin's "admin.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...