1 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. El plugin Popup Like box de WordPress versiones anteriores a 3.6.1, no sanea y escapa del parámetro ays_fb_tab antes de devolverlo en una página de administración, conllevando a un problema de tipo Cross-Site Scripting Reflejado • https://wpscan.com/vulnerability/0a9830df-5f5d-40a3-9841-40994275136f • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •