Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues. id: CVE-2017-18537 info: name: Visitors Online by BestWebSoft 1.0.0 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The visitors-online plugin before 1.0.0 for WordPress has multiple XSS...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

EUVD-2015-9165

Malware in sbrugna...

EUVD-2017-9653

Malware in sbrugna...

WordPress visitors-online plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A cross-site scripting vulnerability exists in the WordPress visitors-onli...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

Cross site scripting

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

CVE-2017-18537

CVE-2017-18537 affects the WordPress plugin Visitors Online by BestWebSoft prior to version 1.0.0. The connected documents confirm multiple Cross-Site Scripting (XSS) issues in the plugin’s input handling, enabling an authenticated attacker to execute arbitrary JavaScript in victims’ browsers and...

CVE-2017-18537

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

PT-2019-8471

Name of the Vulnerable Software and Affected Versions visitors-online plugin versions prior to 1.0.0 Description The issue is related to multiple XSS problems. Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue...

CVE-2017-18537: Improper Neutralization of Input During Web Page Generation

The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...

WordPress visitors-online plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A SQL injection vulnerability exists in the WordPress visitors-online...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

CVE-2015-9325

The CVE-2015-9325 entry corresponds to a SQL injection vulnerability in the WordPress plugin visitors-online (versions prior to 0.4). The vulnerability is triggered via the plugin’s handling of input in SQL context, allowing manipulation of SQL commands (as per the consolidated sources). Impact i...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

CVE-2015-9325

The visitors-online plugin before 0.4 for WordPress has SQL injection...

PT-2019-7284

Name of the Vulnerable Software and Affected Versions visitors-online plugin versions prior to 0.4 Description The issue is related to SQL injection. Recommendations For versions prior to 0.4, update to version 0.4 or later to resolve the issue...

CVE-2015-9325: Improper Neutralization of Special Elements used in an SQL Command

The visitors-online plugin before 0.4 for WordPress has SQL injection...

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...