WordPress Plugin Vulnerabilities

Soundy Background Music <= 3.1 - Reflected Cross-Site Scripting (XSS)

Description

The soundy-background-music WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
soundy-background-music
Fixed in 3.2

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
17bc2763-c098-4cb6-8491-0bad530c8ca1

Timeline

Publicly Published
2016-03-12 (about 8 years ago)
Added
2016-03-13 (about 8 years ago)
Last Updated
2019-10-31 (about 4 years ago)

Other

Published
Title
Published
2023-12-19
Title
Currency Converter Widget < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Published
2014-08-01
Title
Dewplayer - dewplayer-vinyl.swf xml Parameter XML File H&ling XSS
Published
2016-07-11
Title
WP Live Chat Support < 6.2.02 - Stored Cross-Site Scripting
Published
2024-03-15
Title
Gutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS
Published
2014-09-17
Title
Cakifo 1.0 - 1.6.1 XSS