6 matches found
EUVD-2017-9725
Malware in sbrugna...
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
Design/Logic Flaw
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
CVE-2017-18612
The CVE-2017-18612 entry affects WordPress plugin wp-whois-domain version 1.0.0. The issue is an XSS vulnerability in pages/func-whois.php domain parameter, caused by insufficient validation of client-side data. Exploitation is described as unauthenticated in several sources (WPVulndb/Exploits), ...
PT-2019-8543
Name of the Vulnerable Software and Affected Versions wp-whois-domain plugin version 1.0.0 Description The issue concerns a problem with the wp-whois-domain plugin for WordPress, where there is a potential for XSS via the domain parameter in the "pages/func-whois.php" endpoint. Recommendations Fo...
CVE-2017-18612: Improper Neutralization of Input During Web Page Generation
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...