CVE-2016-10952
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-09-13
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
References
- https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_quotes_collection_wordpress_plugin.html
- https://wordpress.org/plugins/quotes-collection/#developers
- https://wpvulndb.com/vulnerabilities/8649
