EUVD-2017-8875

Malware in sbrugna...

Cross site scripting

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

CVE-2017-17719

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

CVE-2017-17719

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

PT-2017-14969

Name of the Vulnerable Software and Affected Versions wp-concours plugin versions prior to 1.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the result message parameter to "includes/concours page.php". Recommendations For wp-concours...

CVE-2017-17719: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

WordPress Concours <= 1.1 - Authenticated Cross-Site Scripting (XSS)

The wp-concours WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...