CVE-2016-10952

概要

参考情報

• sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_quotes_collection_wordpress_plugin.html · Exploit
• wordpress.org/plugins/quotes-collection · Third Party Advisory
• wpvulndb.com/vulnerabilities/8649 · Third Party Advisory

quotes collection のその他の脆弱性

• CVE-2021-24861高 7.2The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement…