WordPress Plugin Vulnerabilities

Mobiloud 1.9.0 - comments/disqus.php shortname Parameter Reflected XSS

Description

The MobiLoud – WordPress Mobile Apps – Convert your WordPress Website to Native Mobile Apps WordPress plugin was affected by a comments/disqus.php shortname Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
mobiloud-mobile-app-plugin
Fixed in 1.9.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
4afc6d4c-c4a7-4c4f-a3dd-7891c56bb750

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-12-28
Title
Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode
Published
2024-03-25
Title
WCFM – Frontend Manager for WooCommerce < 6.7.9 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Published
2025-03-31
Title
WP Date and Time Shortcode < 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-07-20
Title
Elastic Email Sender < 1.2.7 - Admin+ Stored XSS
Published
2024-09-26
Title
Terms descriptions < 3.4.8 - Admin+ Stored XSS