XSS vulnerabilities can be exploited to steal sensitive information or redirect users to another site where they can be extorted. White-hath (CVE-2016-3334) - Stored Cross-Site scripting (XSS) vulnerability in the plugin activation email in plugin  2.0.0 for WordPress.

- Stored XSS vulnerability in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- XSS vulnerabilities in plugin activation email in plugin  2.0.0 for WordPress.

- X

Stored Cross-Site scripting (XSS) vulnerability in plugin activation email in plugin  2.0.0 for WordPress

The stored cross-site scripting (XSS) vulnerability in the plugin activation email in plugin 2.0.0 for WordPress is exploitable remotely without authentication, which allows attackers to steal sensitive information or redirect users to another site where they can be extorted.

Timeline

Published on: 11/18/2022 23:15:00 UTC
Last modified on: 11/23/2022 13:17:00 UTC

References