WordPress Plugin Vulnerabilities

Encrypted Blog 0.0.6.2 - encrypt_blog_form.php redirect_to Parameter Reflected XSS

Description

The Encrypted Blog WordPress plugin was affected by an encrypt_blog_form.php redirect_to Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
encrypted-blog
No known fix

References

URL
https://packetstormsecurity.com/files/#122992/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
d809cb68-bcb1-4729-941b-5502e491a85f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-04-01
Title
Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
Published
2024-03-23
Title
Shortcodes Ultimate < 7.0.5 - Contributor+ Stored Cross-Site Scripting via 'note_color' Shortcode
Published
2025-01-08
Title
ResAds <= 2.0.6 - Reflected Cross-Site Scripting via Multiple Parameters
Published
2023-04-19
Title
Flyzoo Chat <= 2.3.3 - Admin+ Stored XSS
Published
2020-07-24
Title
WooCommerce Subscriptions < 2.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)