Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Nextendweb Subscribe
Filtered by product Nextend Facebook Connect
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-8800 1 Nextendweb 1 Nextend Facebook Connect 2014-12-05 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fb_login_button parameter in a newfb_update_options action.