Vulnerabilities > Smackcoders > Echo Sign > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-17 | CVE-2016-10985 | Cross-site Scripting vulnerability in Smackcoders Echo Sign 1.0.0/1.1.0 The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. | 4.3 |
| 2019-09-17 | CVE-2016-10984 | Cross-site Scripting vulnerability in Smackcoders Echo Sign 1.0.0/1.1.0 The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. | 4.3 |