6 matches found
EUVD-2017-15167
Malware in sbrugna...
WordPress rockhoist-badges plugin cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language.REST API can transfer data via JSON format to access or control the content of the WordPress site. A cross-site scripting vulnerability exists in the WordPress rockhoist-badges plugin due to a failure to adequately validate user...
CVE-2017-6102
Persistent XSS in wordpress plugin rockhoist-badges v1.2.2...
CVE-2017-6102
Persistent XSS in wordpress plugin rockhoist-badges v1.2.2...
CVE-2017-6102
CVE-2017-6102 affects the WordPress plugin rockhoist-badges v1.2.2, with a persistent (stored) XSS flaw caused by insufficient input validation. Several connected sources describe this as an authenticated stored XSS vulnerability that could allow an attacker to execute scripts in a victim’s brows...
