WordPress Plugin Vulnerabilities

Quotes And Tips <= 1.19 - Cross-Site Scripting (XSS)

Description

The Quotes and Tips by BestWebSoft WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
quotes-and-tips
Fixed in 1.20

References

CVE
CVE-2015-9385
URL
http://www.intelligentexploit.com/view-details.html?id=22838

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
33866281-178b-489f-ad84-a522a8f2796a

Timeline

Publicly Published
2015-10-03 (about 10 years ago)
Added
2016-01-06 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-11-01
Title
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) < 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget
Published
2025-01-15
Title
UpdraftPlus - Backup/Restore < 1.25.1 - Reflected XSS
Published
2025-05-19
Title
Active Products Tables for WooCommerce < 1.0.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-10-06
Title
Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
Published
2026-02-11
Title
Prestige < 1.4.1 - Reflected Cross-Site Scripting