>> ARCHIVE: 2016-02

RozBlog Weblog Service suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Import Woocommerce plugin version 1.0.1 suffers from a cross site scripting vulnerability.

WordPress WP Ultimate Exporter plugin version 1.0 suffers from a cross site scripting vulnerability.

WordPress Extra User Details plugin version 0.4.2 suffers from a privilege escalation vulnerability.

WordPress WP Advanced Importer plugin version 2.1.1 suffers from a cross site scripting vulnerability.

OpenAM versions 9 through 9.5.5 and 10.0.0 through 10.0.2 suffer from a cross site scripting vulnerability.

WordPress CSV Import plugin version 1.0 suffers from a cross site scripting vulnerability.

InstallShield suffers from a DLL hijacking vulnerability.

eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the forum functionality.

eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the message attachment.