Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Subscribe to Comments Multiple Cross-Site Scripting Vulnerabilities - Vulnerability Database
WP Plugin Subscribe To Comments

WordPress Plugin Subscribe to Comments Multiple Cross-Site Scripting Vulnerabilities

Medium
Reference: No Reference
Title: WordPress Plugin Subscribe to Comments Multiple Cross-Site Scripting Vulnerabilities
Overview:

WordPress Plugin Subscribe to Comments is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site potentially allowing the attacker to steal cookie-based authentication credentials other attacks are also possible. WordPress Plugin Subscribe to Comments versions prior to 2.0.8 are vulnerable.