Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues. id: CVE-2017-18537 info: name: Visitors Online by BestWebSoft 1.0.0 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The visitors-online plugin before 1.0.0 for WordPress has multiple XSS...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

EUVD-2017-9653

Malware in sbrugna...

EUVD-2015-9165

Malware in sbrugna...

WordPress visitors-online plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A cross-site scripting vulnerability exists in the WordPress visitors-onli...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

Cross site scripting

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

CVE-2017-18537

CVE-2017-18537 affects the WordPress plugin Visitors Online by BestWebSoft prior to version 1.0.0. The connected documents confirm multiple Cross-Site Scripting (XSS) issues in the plugin’s input handling, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers and...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

WordPress visitors-online plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A SQL injection vulnerability exists in the WordPress visitors-online...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

CVE-2015-9325

The CVE-2015-9325 entry corresponds to a SQL injection vulnerability in the WordPress plugin visitors-online (versions prior to 0.4). The vulnerability is triggered via the plugin’s handling of input in SQL context, allowing manipulation of SQL commands (as per the consolidated sources). Impact i...

Visitors Online < 0.4 - SQL Injection

The Visitors Online by BestWebSoft WordPress plugin was affected by a SQL Injection security vulnerability...