CVE-2017-18532

The Realty plugin for WordPress (pre-1.1.0) has multiple XSS issues (CVE-2017-18532). NVD/Nuclei describe authenticated XSS in the plugin, CWE-79, potentially allowing injected JavaScript in victims’ browsers. CVSSv3.0: 6.1 (NETWORK, LOW AC, PR:N, UI:R, Scope:Changed; Confidentiality/Integrity: L...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...