VYPR

Call To Action

by Inboundnow

Source repositories

CVEs (1)

  • CVE-2015-8350MedSep 11, 2017
    risk 0.40cvss 6.1epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/edit.php or (2)…