Cross-site Scripting (XSS)

wordpress is vulnerable to cross-site scripting XSS. The attack is due to not having a proper handling of the stored comments...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

Cross site scripting

WordPress before 5.2.3 allows XSS in stored comments...

UBUNTU-CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2019-16218

CVE-2019-16218 affects WordPress prior to 5.2.3, where stored comments can trigger XSS. Root cause is an input handling flaw in comments that allows script injection. The issue is documented in the CVE entry as WordPress before 5.2.3 allows XSS in stored comments. Public references indicate WordP...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments...

Code injection

Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence which introduces a...

CVE-2019-16214

CVE-2019-16214 affects Libra Core prior to 2019-09-03, where an erroneous regular expression for inline comments lets a nonstandard line-break character (\r) appear to terminate a comment in audits, potentially misleading readers about code execution. The Move module author could place // followe...

PT-2019-5208 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in handling stored comments, allowing for XSS attacks. This could potentially enable a remote attacker to impact data integrity. Recommendations: For WordPress...

PT-2019-14584

Name of the Vulnerable Software and Affected Versions Libra Core versions prior to 2019-09-03 Description The issue arises from an erroneous regular expression for inline comments, making it easier for attackers to interfere with code auditing. This can be achieved by using a nonstandard line-bre...

CVE-2019-16218: Improper Neutralization of Input During Web Page Generation

WordPress before 5.2.3 allows XSS in stored comments...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

Cross site scripting

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

CVE-2017-18608

The CVE-2017-18608 entries describe multiple cross-site scripting (XSS) flaws in the Spot.im / spotim-comments WordPress plugin prior to version 4.0.4. Several connected advisories (Red Hat, CNVD, CVE records, and WPVulnDB) corroborate that the vulnerability affects the WordPress plugin as used i...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

GitLab CE/EE Information Disclosure Vulnerability (CNVD-2019-32224)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. GitLab CE/...