EUVD-2017-9646

Malware in sbrugna...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

WordPress rating-bws plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rating-bws is a user rating, scoring plugin used in it. A cross-site scripting vulnerability exists in versions of the WordPress...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

Cross site scripting

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

CVE-2017-18530 covers the WordPress rating-bws plugin prior to version 0.2, which contains multiple cross-site scripting (XSS) flaws. The core issue is insufficient validation of client-side data, enabling an attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing sess...