WordPress Plugin Vulnerabilities

WP App Maker 1.0.16.4 - icons-launcher.php uid Parameter Reflected XSS

Description

The wp-app-maker WordPress plugin was affected by an icons-launcher.php uid Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
wp-app-maker
No known fix

References

CVE
CVE-2014-4578

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
446152d5-2a15-4992-b76d-c6e1c112213d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-02-29
Title
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Published
2020-08-17
Title
Geo Magazine <= 2.0 - Unauthenticated Reflected XSS
Published
2024-10-24
Title
YITH WooCommerce Product Add-Ons < 4.14.2 - Reflected Cross-Site Scripting
Published
2024-09-23
Title
Seriously Simple Stats < 1.7.0 - Reflected Cross-Site Scripting
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting