RSS   Podatności dla 'Easy fancybox'   RSS

2019-09-26
 
CVE-2019-16524

CWE-79
 

 
The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter.

 

 >>> Vendor: Status301 2 Produkty
Easy fancybox
Coolclock


Copyright 2024, cxsecurity.com

 

Back to Top