WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Multisite Content Copier/Updater plugin...

PT-2022-13221

Name of the Vulnerable Software and Affected Versions WordPress Multisite Content Copier/Updater plugin versions prior to 2.1.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly sanitized and escaped before being...

CVE-2022-0503: Improper Neutralization of Input During Web Page Generation

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard...

CVE-2021-25100

The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2021-25100: Improper Neutralization of Input During Web Page Generation

The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting...

PT-2022-9655

Name of the Vulnerable Software and Affected Versions GiveWP versions prior to 2.17.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly escaped before being outputted back in an attribute in the Donation Forms dashboard...

CVE-2022-0193

The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-13027

Name of the Vulnerable Software and Affected Versions Complianz WordPress plugin versions prior to 6.0.0 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly escaped before being outputted back in an attribute on an admin...

CVE-2022-0193: Improper Neutralization of Input During Web Page Generation

The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2022-12175

Name of the Vulnerable Software and Affected Versions emlog versions pro-1.0.7 and earlier Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the s parameter in the index.php file. This can be exploited by...

CVE-2021-44584: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Cross site scripting

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2021-16390

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro WordPress plugin versions prior to 2.6.6 Description: The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the s parameter is not properly escaped before being outputted in an attribute on an adm...

CVE-2021-24979: Improper Neutralization of Input During Web Page Generation

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-39420

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

CVE-2021-39420

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

CVE-2021-39420: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

VFront 跨站脚本漏洞

vfront is a free open source front-end for MySQL or PostgreSQL databases written in PHP and Javascript. vfront version 0.99.5 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the s parameter in...