WordPress Plugin Vulnerabilities

BannerMan 0.2.4 - XSS in wp-admin/options-general.php via bannerman_background parameter

Description

The BannerMan WordPress plugin was affected by a XSS in wp-admin/options-general.php via bannerman_background parameter security vulnerability.

Affects Plugins

Plugin icon
bannerman
No known fix

References

CVE
CVE-2014-4845
URL
https://packetstormsecurity.com/files/#127289/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
e39d7d25-6ac0-4fbe-9196-600d2418befe

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-11-03
Title
Fancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSS
Published
2025-01-06
Title
Sellsy < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-03-25
Title
Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress < 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Published
2024-01-24
Title
PDF Poster - PDF Embedder Plugin for WordPress < 2.1.18 - Reflected Cross-Site Scripting
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Admin+ Stored XSS