26 matches found
YITH Maintenance Mode < 1.3.8 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise the yithmaintenancenewslettersubmitlabel settings, which could allow high privilege users to perform Cross-Site Scripting attacks...
WordPress YITH Maintenance Mode plugin <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas Patchstack Red Team in WordPress YITH Maintenance Mode plugin versions = 1.3.7. Vulnerable parameter: &yithmaintenancenewslettersubmitlabel. Solution Update the WordPress YITH Maintenance Mode plugin to th...
CVE-2015-9429
The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panelpage parameter...
Cross site request forgery (csrf)
The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panelpage parameter...
CVE-2015-9429
CVE-2015-9429 concerns the WordPress plugin YITH Maintenance Mode (before 1.2.0). The issue is a CSRF that leads to an XSS via the parameter panel_page in the page wp-admin/themes.php?page=yith-maintenance-mode. Affected products/versions: WordPress plugin versions prior to 1.2.0. Documented impa...
