CVE-2017-9288

The WordPress Raygun4WP plugin (v1.8.0 and earlier) is vulnerable to a reflected XSS via sendtesterror.php (backurl parameter). Root cause: improper input handling enables injection of arbitrary script in the user’s browser, potentially leading to script execution in the site context. Affected pr...

CVE-2017-18531

CVE-2017-18531 corresponds to a cross-site scripting flaw in the WordPress Raygun4WP plugin. Affects the plugin prior to version 1.8.3 for WordPress, with the vulnerability located in the plugin settings handling. Exploitation could allow an attacker to inject and execute arbitrary scripts in the...