CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

EUVD-2017-9721

Malware in sbrugna...

WordPress spotim-comments plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. spotim-comments is a user interaction plugin used in it, which includes features such as real-time comments, online chat, and...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

Cross site scripting

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

CVE-2017-18608

The CVE-2017-18608 entries describe multiple cross-site scripting (XSS) flaws in the Spot.im / spotim-comments WordPress plugin prior to version 4.0.4. Several connected advisories (Red Hat, CNVD, CVE records, and WPVulnDB) corroborate that the vulnerability affects the WordPress plugin as used i...