WordPress Plugin Vulnerabilities

Post views 2.6.1.2 - search_input Parameter Cross-Site Scripting (XSS)

Description

The post-views WordPress plugin was affected by a search_input Parameter Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
post-views
Fixed in 2.6.1.3

References

URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/80076
URL
https://plugins.trac.wordpress.org/changeset/634040/post-views

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
903d452f-629f-41fa-950d-0be9f12ecbdc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-10-24
Title
WP Abstracts < 2.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Author+ Stored XSS
Published
2026-03-20
Title
Autoptimize < 3.1.15 - Contributor+ Stored XSS via Lazy-loaded Image Attributes
Published
2024-08-16
Title
WP Travel Gutenberg Blocks < 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-02-14
Title
Leyka < 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting