medium6.1
CVE-2016-10984
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.
Impact
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smackcoders | Echo Sign | before 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://0x62626262.wordpress.com/2016/04/21/echosign-plugin-for-wordpress-xss-vulnerability/
- https://wordpress.org/plugins/echosign/#developers
- https://wpvulndb.com/vulnerabilities/8465
- https://0x62626262.wordpress.com/2016/04/21/echosign-plugin-for-wordpress-xss-vulnerability/
- https://wordpress.org/plugins/echosign/#developers
- https://wpvulndb.com/vulnerabilities/8465