WordPress Plugin Vulnerabilities

Crony Cronjob Manager < 0.4.7 - Cross-Site Scripting (XSS) & CSRF

Description

The Crony Cronjob Manager WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
crony
Fixed in 0.4.7

References

CVE
CVE-2017-14530
URL
https://github.com/cybersecurityworks/Disclosed/issues/9

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
71fc2b13-e7f5-42da-a6bb-7ea0bff4b8d0

Timeline

Publicly Published
2015-10-27 (about 10 years ago)
Added
2015-10-27 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-03-11
Title
DZS Videogallery Plugin <= 8.60 - Multiple Vulnerabilities
Published
2014-10-01
Title
Refraction Theme Multiple Vulnerabilities (XSS, FPD)
Published
2016-08-10
Title
CampTix Event Ticketing < 1.5 - CSV Injection and XSS
Published
2015-05-15
Title
My Calendar <= 2.3.29 - Arbitrary File Override & Reflected XSS
Published
2019-07-09
Title
Icegram < 1.10.29 - CSRF to Stored XSS