Skip to content

Known CVE

Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting

The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.

CVE-2016-10973

Medium2016CVSS 6.1CWE-79

cve2016 · wpscan · wordpress · wp · wp-plugin · xss · brafton · authenticated

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website