PT-2021-15942

Name of the Vulnerable Software and Affected Versions Prismatic WordPress plugin versions prior to 2.8 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the tab GET parameter is not properly escaped before being outputted back in an attribute. This...

WordPress plugin cross-site scripting vulnerability (CNVD-2021-36533)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in wpscan tha...

CVE-2021-24283

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue...

CVE-2018-9034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...