CVE-2017-18565

The CVE-2017-18565 issue affects the WordPress updater plugin by BestWebSoft up to version 1.35. The connected Nuclei template and related references confirm multiple Cross-Site Scripting (XSS) flaws in the updater plugin before 1.35, enabling an attacker with authenticated access to inject and e...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...