WordPress Plugin Vulnerabilities

Quotes Collection <= 2.0.5 - Reflected Cross-Site Scripting (XSS)

Description

The Quotes Collection WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
quotes-collection
Fixed in 2.0.6

References

CVE
CVE-2016-10952
URL
https://plugins.trac.wordpress.org/changeset/1538861/quotes-collection
URL
https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_quotes_collection_wordpress_plugin.html

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
dc6495d4-e50f-4f3e-bf5e-bca2a5883c9c

Timeline

Publicly Published
2016-11-08 (about 9 years ago)
Added
2016-11-08 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-04-11
Title
Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS
Published
2024-07-05
Title
NEX-Forms – Ultimate Form Builder < 8.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2016-08-15
Title
Link Library <= 5.9.12.29 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2025-04-10
Title
Stop Registration Spam <= 1.24 - Reflected Cross-Site Scripting
Published
2025-03-03
Title
Master Addons < 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter