Source evidence

XSS

PBP Newsticker · support · 2020-08-21T09:15:00+00:00

PBP Newsticker plugin evidence original source source API

complaintsentiment

mediumseverity

0.75relevance

0replies

Evidence onlycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

1 / 1 rows with source links

100.0% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

0 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

mayfly277 unresolved

This plugin got an xss reflected at this url : /wp-admin/options-general.php?page=pbpNewsticker&action=edit&ticker_id=999%27%22%3Cscript%3Ealert%281%29%3C%2Fscript%3E There is also stored xss on the saved newstickers. plz modify the plugin to escape js/html. regards.

Evidence Context

Evidence only

Evidence only

This row is useful source evidence, but it has not been promoted into a build-worthy commercial opportunity.

Analysis

heuristic-v1

Summary: XSS: users show compatibility, missing feature pain that may indicate a product gap.

Evidence quote: XSS This plugin got an xss reflected at this url : /wp-admin/options-general.php?page=pbpNewsticker&action=edit&ticker_id=999%27%22%3Cscript%3Ealert%281%29%3C%2Fscript%3E There is also stored xss on the saved newstickers.

Affected feature: compatibility

compatibility missing feature value

Plugin

API

PBP Newsticker

10 active installs · 3.2K downloads · rating 66.0

newsticker

Comments

0 shown

No comments were stored for this source.