7 matches found
WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting
WordPress plugin Simpel Reserveren 3.5.2 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
CVE-2018-1000149
A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that...
VulnCheck KEV: CVE-2016-1000149
Reflected XSS in wordpress plugin simpel-reserveren v3.5.2...
CVE-2017-1000149
Mahara is affected by a cross‑site scripting (XSS) vulnerability involving window.opener (target="_blank" and window.open()) in versions 1.10 before 1.10.9, 15.04 before 15.04.6, and 15.10 before 15.10.2. The issue allows an attacker to manipulate navigation or access DOM/window.opener objects vi...
CVE-2016-1000149
Reflected XSS in wordpress plugin simpel-reserveren v3.5.2...
CVE-2016-1000149
The WordPress Simpel Reserveren plugin (versions 3.5.2 and before ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the transmission of unsanitized data via the page variable in the /simpel-reserveren/edit.php file. An attacker can exploit this to execute arbitrar...