WordPress Plugin Vulnerabilities

CampTix Event Ticketing < 1.5 - CSV Injection and XSS

Description

The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection and XSS security vulnerability.

Affects Plugins

Plugin icon
camptix
Fixed in 1.5

References

CVE
CVE-2016-10763
CVE
CVE-2016-10762
URL
https://hackerone.com/reports/151516
URL
https://hackerone.com/reports/152958

Miscellaneous

Original Researcher
Zawad Bin Hafiz
Verified
No
WPVDB ID
ec1234b6-475d-4f6e-acb3-baa9a3dbce38

Timeline

Publicly Published
2016-08-10 (about 9 years ago)
Added
2019-07-18 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-07-08
Title
SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection
Published
2016-08-15
Title
Peter's Login Redirect <= 2.9.0 - Cross-Site Scripting (XSS) & CSRF
Published
2018-05-10
Title
Ultimate Member < 2.0.4 - Multiple Issues
Published
2014-08-01
Title
wp-cleanfix - Remote Comm& Execution, CSRF & XSS
Published
2019-07-09
Title
Icegram < 1.10.29 - CSRF to Stored XSS