CVE-2018-5652: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodeend parameter...

CVE-2018-5651: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...

PT-2018-17051

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists. This is due to the dark mode end parameter in the "wp-admin/profile.php" endpoint. Recommendation...

PT-2018-17050

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists via the dark mode start parameter in the "wp-admin/profile.php" API endpoint. Recommendations For...

CVE-2018-5214

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

CVE-2018-5214: Improper Neutralization of Input During Web Page Generation

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

PT-2018-16806

Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

CVE-2017-10673: Improper Neutralization of Input During Web Page Generation

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

PT-2017-11426

Name of the Vulnerable Software and Affected Versions GetSimple CMS versions 3.x Description The issue is related to a name field in the admin/profile.php file, which has XSS. Recommendations For GetSimple CMS versions 3.x, update to a version that includes a fix for this issue, or as a temporary...