EUVD-2015-9252

Malware in sbrugna...

CVE-2015-9412

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

WordPress Royal-Slider plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Royal-Slider is a responsive image gallery and content slider plugin used in it. A cross-site scripting vulnerability exists in the...

CVE-2015-9412

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

Cross site scripting

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

CVE-2015-9412

CVE-2015-9412 affects the WordPress plugin Royal-Slider (vulnerable: before 3.2.7). The issue is an XSS in the site’s admin UI via the rstype parameter when creating/editing a slider. Several connected sources corroborate: Red Hat and CNVD entries describe the same XSS in the Royal-Slider plugin;...

CVE-2015-9412: Improper Neutralization of Input During Web Page Generation

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter...

PT-2019-7371

Name of the Vulnerable Software and Affected Versions Royal-Slider plugin versions prior to 3.2.7 Description The issue concerns a cross-site scripting XSS flaw via the rstype parameter. This allows for potential malicious script injection, affecting the security of the plugin. Recommendations Fo...

WordPress Royal Slider Plugin <= 3.2.6 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML in browser in context of the vulnerable website. Solution Update the plugin...

Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)

The vulnerability exists due to insufficient sanitation of user-supplied data in "rstype" HTTP GET parameter when creating / editing a slider. A remote attacker can trick a logged-in administrator to open a specially crafted link and execute arbitrary HTML and script code in browser in context of...

Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)

The vulnerability exists due to insufficient sanitation of user-supplied data in "rstype" HTTP GET parameter when creating / editing a slider. A remote attacker can trick a logged-in administrator to open a specially crafted link and execute arbitrary HTML and script code in browser in context of...