7063 matches found
Cross site request forgery (csrf)
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...
CVE-2018-21002
The CVE-2018-21002 entry affects the WordPress plugin js-support-ticket prior to version 2.0.6, which is vulnerable to Cross-Site Request Forgery (CSRF). The issue is caused by CSRF in the plugin’s handling of requests, enabling unintended state-changing actions on affected sites. NVD lists CVSS ...
CVE-2018-21002
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...
PT-2019-10429
Name of the Vulnerable Software and Affected Versions js-support-ticket plugin versions prior to 2.0.6 Description The issue affects the js-support-ticket plugin for WordPress, allowing for CSRF attacks. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the...
django-js-reverse cross-site scripting vulnerability
django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...
CVE-2018-21002: Cross-Site Request Forgery (CSRF)
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...
HTTP/2 DoS
The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting...
Cross-site Scripting (XSS)
django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
Design/Logic Flaw
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
PYSEC-2019-89
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
CVE-2019-15486
The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
PT-2019-20170
Name of the Vulnerable Software and Affected Versions django-js-reverse versions prior to 0.9.1 Description The issue is related to a XSS vulnerability via the js reverse inline function. Recommendations For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue...
CVE-2019-15486: Improper Neutralization of Input During Web Page Generation
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
PT-2019-14215
Name of the Vulnerable Software and Affected Versions django-js-reverse version 0.9.0 and earlier Description The issue is related to a security problem where an attacker can exploit the js reverse inline to perform a cross-site scripting XSS attack. Recommendations For django-js-reverse versions...
