3 matches found
PT-2020-10053
Name of the Vulnerable Software and Affected Versions wpForo plugin version 1.6.5 Description The issue allows for XSS via the "wp-admin/admin.php?page=wpforo-phrases" API endpoint, specifically through the langid parameter. Recommendations For wpForo plugin version 1.6.5, avoid using the langid...
CVE-2019-19110: Improper Neutralization of Input During Web Page Generation
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter...
PT-2020-10052
Name of the Vulnerable Software and Affected Versions wpForo plugin version 1.6.5 Description The issue allows for XSS via the "s" parameter in the "/admin.php?page=wpforo-phrases" API endpoint. Recommendations For wpForo plugin version 1.6.5, avoid using the s parameter in the...