WordPress Plugin Vulnerabilities

Repagent - dewplayer-vinyl-en.swf xml Parameter XML File H&ling XSS

Description

The repagent WordPress plugin was affected by a dewplayer-vinyl-en.swf xml Parameter XML File H&ling XSS security vulnerability.

Affects Plugins

Plugin icon
repagent
No known fix

References

URL
https://packetstormsecurity.com/files/#124582/
URL
https://seclists.org/fulldisclosure/2013/Dec/192

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f460d044-1811-4111-88fe-1b0813e32235

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2023-02-17
Title
Simple PDF Viewer <= 1.9 - Contributor+ XSS
Published
2022-04-21
Title
WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
Published
2023-09-01
Title
Smarty for WordPress <= 3.1.35 - Admin+ Stored XSS
Published
2014-08-01
Title
Gallery Bank 2.0.19 - album-gallery-bank-class.php recordsArray Parameter Reflected XSS
Published
2014-05-28
Title
Conversador <= 2.61 - Cross-Site Scripting (XSS)