EUVD-2018-2822

Malware in sbrugna...

WordPress Tagregator 0.6 Cross Site Scripting

Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting Date: 2018-05-05 Exploit Author: ManhNho Vendor Homepage: https://wordpress.org/plugins/tagregator/ Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip Ref: https://pastebin.com/ZGr5tyP2 Version: 0.6 Tested...

WordPress Tagregator 0.6 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting Exploit Author: ManhNho Vendor Homepage: https://wordpress.org/plugins/tagregator/ Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip Ref:...

WordPress Tagregator Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Tagregator plugin is used in one of the plugin used to add shortcodes in the web page. A cross-site scripting...

CVE-2018-10752

The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action...

CVE-2018-10752

The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action...

CVE-2018-10752

The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action...

CVE-2018-10752

The CVE-2018-10752 entry concerns WordPress Tagregator plugin version 0.6, where a Stored XSS vulnerability exists in the Add New action’s title field. The root cause is inadequate input sanitization/escaping for the title, enabling an attacker with access to the admin interface to inject script ...

Tagregator <= 0.6 - Stored XSS

The Tagregator WordPress plugin was affected by a Stored XSS security vulnerability...

Ian Dunn: XSS in Tagregator plugin

This is a XSS in Tagregator plugin that affect on wordpress users i'm making my test on alwaysdata host target: http://diaa.alwaysdata.net/wordpress/wp-admin/post-new.php?posttype=tggr-flickr infected input: posttitle payload: alert"a7a"; then get the Permalink that is generated for public user:...