WordPress Plugin Vulnerabilities

Sermon Browser < 0.45.16 - Multiple XSS

Description

The Sermon Browser WordPress plugin was affected by a Multiple XSS security vulnerability.

Affects Plugins

Plugin icon
sermon-browser
Fixed in 0.45.16

References

CVE
CVE-2016-10897

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
1c1f7f04-7841-416a-97e2-4a730b503e45

Timeline

Publicly Published
2016-04-26 (about 10 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-14
Title
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-01-23
Title
Lightweight Accordion < 1.5.15 - Contributor+ Stored XSS
Published
2024-04-05
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
Published
2025-09-22
Title
Kama Click Counter < 4.1.0 - Contributor+ Stored XSS
Published
2025-01-16
Title
Preloader Quotes <= 1.0.0 - Reflected Cross-Site Scripting