WordPress Plugin Vulnerabilities

IndiaNIC FAQs Manager 1.0 - Ask Question Form question Parameter XSS

Description

The faqs-manager WordPress plugin was affected by an Ask Question Form question Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
faqs-manager
No known fix

References

Exploitdb
24867
URL
https://packetstormsecurity.com/files/#120910/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
4f0bfea1-88b4-4f6e-8dfa-ac032265c843

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-03-04
Title
Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function
Published
2025-04-24
Title
Floating Social Bar <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2025-01-17
Title
Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-08-30
Title
Beaver Builder < 2.5.5.3 - Authenticated Stored XSS via Caption
Published
2023-03-10
Title
GiveWP < 2.25.2 - Author+ Stored Cross-Site Scripting