WordPress Plugin Vulnerabilities

Simple Flickr Display - Username Field Stored Cross-Site Scripting (XSS)

Description

The Simple Flickr Display WordPress plugin was affected by an Username Field Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
simple-flickr-display
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
6794b7a4-79c5-497b-830d-29eb74775e7d

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2016-04-10 (about 8 years ago)

Other

Published
Title
Published
2022-06-13
Title
Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting
Published
2023-11-14
Title
Interactive World Map < 3.4.4 - Reflected Cross-Site Scripting
Published
2021-10-05
Title
Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Published
2023-01-06
Title
Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode
Published
2021-08-25
Title
Contact Form 7 Zoho < 1.1.8 - Reflected Cross-Site Scripting