WordPress Plugin Vulnerabilities

FlagEm - flagit.php cID Parameter XSS

Description

The FlagEm WordPress plugin was affected by a flagit.php cID Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
FlagEm
No known fix

References

URL
https://packetstormsecurity.com/files/#122505/
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/85925

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
3833da45-cf4c-46fb-923e-1ffd733ea38d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-06-05
Title
RTMKit Addons for Elementor < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-06-27
Title
Omnipress < 1.6.5 - Contributor+ Stored XSS
Published
2014-08-01
Title
GRAND Flash Album Gallery < 1.76 - Reflected Cross-Site Scripting via wp-admin/admin.php skin parameter
Published
2025-02-23
Title
Wired Impact Volunteer Management < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2020-07-09
Title
Travel Booking < 2.8.4 - Unauthenticated Cross-Site Scripting (XSS)