WordPress Plugin Vulnerabilities

Mobiloud < 2.3.8 - Multiple Cross-Site Scripting (XSS)

Description

The MobiLoud – WordPress Mobile Apps – Convert your WordPress Website to Native Mobile Apps WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
mobiloud-mobile-app-plugin
Fixed in 2.3.8

References

CVE
CVE-2014-5344

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
erwanlr
Verified
No
WPVDB ID
9d92421f-f906-432b-b02d-c781eab0e343

Timeline

Publicly Published
2014-09-17 (about 11 years ago)
Added
2014-09-17 (about 11 years ago)
Last Updated
2020-10-25 (about 5 years ago)

Other

Published
Title
Published
2024-11-29
Title
Social Sharing Plugin – Sassy Social Share < 3.3.70 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Published
2022-12-02
Title
Bulk Delete Users by Email < 2.0.0 - Reflected Cross-Site Scripting
Published
2024-06-11
Title
Events Addon for Elementor < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published
2024-04-30
Title
Archives Calendar Widget <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting