CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

CVE-2013-7472: Improper Neutralization of Input During Web Page Generation

The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...

PT-2019-7021

Name of the Vulnerable Software and Affected Versions Count per Day plugin versions prior to 3.2.6 Description The issue allows for XSS exploitation via the daytoshow parameter in the /wp-admin/?page=cpd metaboxes API endpoint. Recommendations For versions prior to 3.2.6, update to version 3.2.6 ...

CVE-2008-0192: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to 1 wp-admin/post.php or 2 wp-admin/page-new.php...