CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-09-17

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Leenk.me (Leenk)

References

• https://wordpress.org/plugins/leenkme/#developers
• https://wpvulndb.com/vulnerabilities/8457
• https://www.openwall.com/lists/oss-security/2016/04/16/4