97 matches found
CVE-2015-9388: Cross-Site Request Forgery (CSRF)
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS...
CVE-2016-10962
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
CVE-2016-10962
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
CVE-2016-10962: Cross-Site Request Forgery (CSRF)
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
CVE-2018-13137: Improper Neutralization of Input During Web Page Generation
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbemeventreapprovedemailbody parameter to the wp-admin/edit.php?posttype=event&page=events-manager-options URI...
CVE-2019-9909: Improper Neutralization of Input During Web Page Generation
The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS...
Cross site scripting
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325...
CVE-2018-19845
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325...
CVE-2018-19845
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325...
CVE-2018-19845
CVE-2018-19845 is a stored XSS in GetSimple CMS. Multiple connected documents confirm the vulnerability in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter (and related CVE-2018-16325). CNVD/OSV/ CNVD entries also reference GetSimple CMS 3.4.0.9 and the admin/edit.php title field...
CVE-2018-19845: Improper Neutralization of Input During Web Page Generation
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325...
PT-2018-15127
Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.12 Description The issue is related to Stored XSS in the admin/edit.php page, specifically via the post-menu parameter. Recommendations For GetSimple CMS version 3.3.12, avoid using the post-menu parameter in the...
Cross site scripting
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
CVE-2018-16325
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
CVE-2018-16325
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
CVE-2018-16325
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
CVE-2018-16325
GetSimple CMS 3.4.0.9 is affected by Stored/ reflected XSS via the admin/edit.php title field (CVE-2018-16325). The available connected documents confirm XSS in the title input, but do not provide exploitation details or a patch/mitigation entry. No explicit root-cause or vulnerable vector beyond...
CVE-2018-16325: Improper Neutralization of Input During Web Page Generation
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
PT-2018-13489
Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.4.0.9 Description The issue concerns a Cross-Site Scripting XSS flaw. It can be exploited via the title field in the admin/edit.php endpoint. Recommendations For GetSimple CMS version 3.4.0.9, avoid using the title fiel...