WordPress Plugin Vulnerabilities

Custom Website Data 1.0 - wp-admin/admin.php ref Parameter XSS

Description

The Custom Website Data WordPress plugin was affected by a wp-admin/admin.php ref Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
simple-custom-website-data
Fixed in 1.1

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
cf8fd3b9-3265-475e-816b-7d90ecc1ec7d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-09-30
Title
Stars Testimonials < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode
Published
2015-08-10
Title
Email Users <= 4.7.5 - Authenticated Cross-Site Scripting (XSS)
Published
2023-11-29
Title
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Published
2024-12-17
Title
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting
Published
2024-05-17
Title
Piotnet Addons For Elementor < 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets