WordPress Plugin Vulnerabilities

Car Demon 1.0.1 - /wp-admin/edit.php Multiple Parameter XSS

Description

The Car Demon WordPress plugin was affected by a /wp-admin/edit.php Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
car-demon
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
3a62378f-414d-4216-ba93-268d823a2353

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2015-06-05
Title
WP ViperGB < 1.13.16 - XSS
Published
2024-02-02
Title
Easy Digital Downloads < 3.2.7 - Shop Manager+ Stored XSS
Published
2014-08-01
Title
CommentLuv 2.92.3 - Cross Site Scripting
Published
2024-05-09
Title
Gutenberg Blocks with AI by Kadence WP < 3.2.37 - Contributor+ Stored Cross-Site Scripting via Block Link
Published
2022-08-04
Title
Download Manager < 3.2.53 - Unauthenticated Reflected Cross-Site Scripting