CVE-2017-18500

The CVE-2017-18500 affects the WordPress plugin social-buttons-pack prior to version 1.1.1. The issue is cross-site scripting (XSS) due to improper handling/validation of input data, enabling an authenticated attacker to inject JavaScript in victims’ browsers (possible session/credential impact) ...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...