CVE-2017-18517

CVE-2017-18517 affects the WordPress plugin bws-pinterest prior to version 1.0.5 from the vendor BestWebSoft. The connected document set describes multiple Cross-Site Scripting (XSS) issues in this plugin, enabling an attacker to execute arbitrary JavaScript in victims’ browsers. The Nuclei templ...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...