medium6.1
CVE-2017-2169
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web…
Impact
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxbuttons Project | Maxbuttons | through 6.18 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093
- https://jvn.jp/en/jp/JVN70411623/index.html
- https://wordpress.org/plugins/maxbuttons/#developers
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093
- https://jvn.jp/en/jp/JVN70411623/index.html
- https://wordpress.org/plugins/maxbuttons/#developers