CVE-2018-20983 – Perfect Images <= 5.2.2 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2018-20983
The wp-retina-2x plugin before 5.2.3 for WordPress has XSS. El complemento wp-retina-2x en versiones anteriores a 5.2.3 para WordPress tiene XSS. • https://wordpress.org/plugins/wp-retina-2x/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2018-0511 – WP Retina 2x <= 5.2.0 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2018-0511
Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de tipo Cross-Site Scripting (XSS) en WP Retina 2x en versiones anteriores a la 5.2.2 permite que los atacantes inyecten scripts web o HTML arbitrarios utilizando vectores no especificados. • https://jvn.jp/en/jp/JVN30636823/index.html https://plugins.trac.wordpress.org/changeset/1802137/#file1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •