CVE-2017-18590

The CVE-2017-18590 issue affects the WordPress Timesheet plugin up to version 0.1.5. The connected nuclei template confirms multiple XSS flaws in the Timesheet plugin, with an impact where authenticated attackers can run arbitrary JavaScript in victims’ browsers, potentially compromising sessions...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...