Vulnerabilities > Smackcoders > Echo Sign > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2019-09-17 CVE-2016-10985 Cross-site Scripting vulnerability in Smackcoders Echo Sign 1.0.0/1.1.0
The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.
4.3
2019-09-17 CVE-2016-10984 Cross-site Scripting vulnerability in Smackcoders Echo Sign 1.0.0/1.1.0
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.
4.3