WordPress Plugin Vulnerabilities

Usernoise 3.7.8 - Feedback Submission summary Field XSS

Description

The Usernoise modal feedback / contact form WordPress plugin was affected by a Feedback Submission summary Field XSS security vulnerability.

Affects Plugins

Plugin icon
usernoise
Fixed in 3.7.9

References

Exploitdb
27403
URL
https://packetstormsecurity.com/files/#122701/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
5ae516b6-5c3f-40bc-be91-2ea5d13b62f3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-03-15
Title
HT Easy GA4 ( Google Analytics 4 ) < 1.1.8 - Reflected Cross-Site Scripting
Published
2016-11-08
Title
WassUp Real Time Analytics <= 1.9 - Cross Site Scripting
Published
2025-12-31
Title
The Moneytizer < 10.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-07-11
Title
Swift Framework < 2024.04.30 - Contributor+ Stored XSS
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads