EUVD-2016-1097

Malware in sbrugna...

Wordpress tidio-gallery plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on servers with PHP and MySQL. tidio-gallery is one of the photo gallery plugin. A cross-site scripting vulnerability exists in version 1.1 of the...

CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

Cross site scripting

Reflected XSS in wordpress plugin tidio-gallery v1.1...

CVE-2016-1000153

The CVE-2016-1000153 entry concerns WordPress tidio-gallery plugin (v1.1 and earlier). A reflected XSS vulnerability exists in the plugin (notably in popup-insert-help.php) that could allow an attacker to execute arbitrary script in the victim’s browser, potentially stealing cookies or session da...

CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

PT-2016-4545

Name of the Vulnerable Software and Affected Versions tidio-gallery version 1.1 Description The issue is related to a Reflected XSS in the tidio-gallery wordpress plugin. Recommendations For tidio-gallery version 1.1, update to a newer version that contains a fix for this issue...

CVE-2016-1000153: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin tidio-gallery v1.1...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=""...

WordPress Tidio Gallery Plugin <= 1.1 - Cross Site Scripting (XSS)

This vulnerability is in the php code /tidio-gallery/popup-insert-help.php. Solution Update the plugin...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId="alert1;"...

WordPress Tidio Gallery 1.1 Shell Upload / XSS

Exploit Title : Wordpress Tidio Gallery 1.1 Shell Upload and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.tidioelements.com/ Software Link : http://downloads.wordpress.org/plugin/tidio-gallery.zip Date : 2014-07-14 Tested on : Windows 7 / Mozilla Firefox...