EUVD-2020-18062

Malware in sbrugna...

CVE-2020-25375

Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...

CVE-2020-25375

WP SMART CRM (SoftradeWeb SNC) version 1.8.7 is affected by stored Cross Site Scripting via multiple customer fields (Business Name, Tax Code, First Name, Address, Town, Phone, Mobile, Place of Birth, Web Site, VAT Number, Last Name, Fax, Email, Skype). Root cause: inadequate input sanitization i...

PT-2020-16072 · Softradeweb Snc · Wp Smart Crm

Name of the Vulnerable Software and Affected Versions: WP SMART CRM version 1.8.7 Description: The issue affects the Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM, where Cross Site Scripting is possible via several fields, including the Business Name field, Tax Code field, First Name fiel...

WordPress WP smart CRM & Invoices FREE plugin <= 1.8.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by ZeroAptitude in WordPress WP smart CRM & Invoices FREE plugin versions = 1.8.7. Solution 2020-09-16 - we were unable to find a patched version of this plugin. WordPress.org notification: "This plugin has been closed as of July 2...