WordPress Plugin Vulnerabilities

ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard

Description

The ed2k-link-selector WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability.

Affects Plugins

Plugin icon
ed2k-link-selector
No known fix

References

CVE
CVE-2013-1808
URL
https://en.0day.today/exploits/20396

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
4d79cf37-129f-44ca-8fb6-eedc9fefdc97

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2022-08-11
Title
Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored Cross-Site Scripting
Published
2024-02-12
Title
Bold Page Builder < 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Published
2024-03-29
Title
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
Published
2023-02-21
Title
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS
Published
2023-10-17
Title
User Feedback < 1.0.10 - Unauthenticated Stored XSS