WordPress Plugin Vulnerabilities

WordPress-to-Lead for Salesforce CRM 1.0.4 - ov_plugin_tools.php textinput Function XSS

Description

The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by an ov_plugin_tools.php textinput Function XSS security vulnerability.

Affects Plugins

Plugin icon
salesforce-wordpress-to-lead
Fixed in 1.0.5

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
32587b58-3564-4353-bbf1-39256f2eb228

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-03-29
Title
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Published
2022-11-14
Title
WordPress Countdown Widget < 3.1.9.3 - Admin+ Stored XSS
Published
2024-10-14
Title
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-01-24
Title
Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting
Published
2006-09-17
Title
Subscribe to Comments < 2.0.8 - Reflected XSS