EUVD-2020-21105

Malware in sbrugna...

CVE-2020-28707: Improper Neutralization of Input During Web Page Generation

The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting XSS via stockdiocharthistorical-wp.js in wp-content/plugins/stockdio-historical-chart/assets/ because the origin of a postMessage event is not validated. The stockdioeventer function listens for an...