CVE-2016-10985 Echo Sign < 1.2 - Reflected Cross-Site Scripting
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Smackcoders Inc. echo sign | < 1.2 | 1.2 |
| wordpress echosign(WordPress) | < 1.2 | 1.2 |
References
- 0x62626262.wordpress.com exploit third-party-advisory
- wordpress.org release-notes
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org