Search criteria

2 vulnerabilities found for MaxButtons Pro by Max Foundry

CVE-2017-2169 (GCVE-0-2017-2169)

Vulnerability from nvd – Published: 2017-05-22 16:00 – Updated: 2024-08-05 13:48
VLAI
Summary
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity
No CVSS data available.
CWE
  • Cross-site scripting
Assigner
References
URL Tags
https://wordpress.org/plugins/maxbuttons/#developers x_refsource_CONFIRM
https://jvn.jp/en/jp/JVN70411623/index.html third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093 third-party-advisoryx_refsource_JVNDB
Impacted products
Vendor Product Version
Max Foundry MaxButtons Affected: prior to version 6.19
Create a notification for this product.
Max Foundry MaxButtons Pro Affected: prior to version 6.19
Create a notification for this product.
Date Public
2017-05-16 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:48:03.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wordpress.org/plugins/maxbuttons/#developers"
          },
          {
            "name": "JVN#70411623",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
          },
          {
            "name": "JVNDB-2017-000093",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MaxButtons",
          "vendor": "Max Foundry",
          "versions": [
            {
              "status": "affected",
              "version": "prior to version 6.19"
            }
          ]
        },
        {
          "product": "MaxButtons Pro",
          "vendor": "Max Foundry",
          "versions": [
            {
              "status": "affected",
              "version": "prior to version 6.19"
            }
          ]
        }
      ],
      "datePublic": "2017-05-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-site scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-05-22T15:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wordpress.org/plugins/maxbuttons/#developers"
        },
        {
          "name": "JVN#70411623",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
        },
        {
          "name": "JVNDB-2017-000093",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2017-2169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MaxButtons",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to version 6.19"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MaxButtons Pro",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to version 6.19"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Max Foundry"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wordpress.org/plugins/maxbuttons/#developers",
              "refsource": "CONFIRM",
              "url": "https://wordpress.org/plugins/maxbuttons/#developers"
            },
            {
              "name": "JVN#70411623",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
            },
            {
              "name": "JVNDB-2017-000093",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2017-2169",
    "datePublished": "2017-05-22T16:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T13:48:03.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2169 (GCVE-0-2017-2169)

Vulnerability from cvelistv5 – Published: 2017-05-22 16:00 – Updated: 2024-08-05 13:48
VLAI
Summary
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity
No CVSS data available.
CWE
  • Cross-site scripting
Assigner
References
URL Tags
https://wordpress.org/plugins/maxbuttons/#developers x_refsource_CONFIRM
https://jvn.jp/en/jp/JVN70411623/index.html third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093 third-party-advisoryx_refsource_JVNDB
Impacted products
Vendor Product Version
Max Foundry MaxButtons Affected: prior to version 6.19
Create a notification for this product.
Max Foundry MaxButtons Pro Affected: prior to version 6.19
Create a notification for this product.
Date Public
2017-05-16 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:48:03.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wordpress.org/plugins/maxbuttons/#developers"
          },
          {
            "name": "JVN#70411623",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
          },
          {
            "name": "JVNDB-2017-000093",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MaxButtons",
          "vendor": "Max Foundry",
          "versions": [
            {
              "status": "affected",
              "version": "prior to version 6.19"
            }
          ]
        },
        {
          "product": "MaxButtons Pro",
          "vendor": "Max Foundry",
          "versions": [
            {
              "status": "affected",
              "version": "prior to version 6.19"
            }
          ]
        }
      ],
      "datePublic": "2017-05-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-site scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-05-22T15:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wordpress.org/plugins/maxbuttons/#developers"
        },
        {
          "name": "JVN#70411623",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
        },
        {
          "name": "JVNDB-2017-000093",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2017-2169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MaxButtons",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to version 6.19"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "MaxButtons Pro",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to version 6.19"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Max Foundry"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wordpress.org/plugins/maxbuttons/#developers",
              "refsource": "CONFIRM",
              "url": "https://wordpress.org/plugins/maxbuttons/#developers"
            },
            {
              "name": "JVN#70411623",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN70411623/index.html"
            },
            {
              "name": "JVNDB-2017-000093",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2017-2169",
    "datePublished": "2017-05-22T16:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T13:48:03.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}