CVE-2014-7181

Description

References

• packetstormsecurity.com/files/128693/WordPress-MaxButtons-1.26.0-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/533700/100/0/threaded
• wordpress.org/plugins/maxbuttons/changelog · Vendor Advisory
• htbridge.com/advisory/HTB23237

Altre vulnerabilità di maxbuttons

• CVE-2024-8968MEDIO 4.7The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-10555MEDIO 4.8The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-6499MEDIO 5.3The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.…
• CVE-2024-3026MEDIO 5.4The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users w…
• CVE-2023-7029MEDIO 5.4The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in al…