5 matches found
CVE-2017-1000153
This CVE affects Mahara versions 15.04 (before 15.04.10), 15.10 (before 15.10.6), and 16.04 (before 16.04.4) due to incorrect access control after a password-reset link is sent via email and the user changes the default email. Mahara fails to invalidate the old link, allowing an attacker to acces...
CVE-2016-1000153
Reflected XSS in wordpress plugin tidio-gallery v1.1...
CVE-2016-1000153
Reflected XSS in wordpress plugin tidio-gallery v1.1...
CVE-2016-1000153
The CVE-2016-1000153 entry concerns WordPress tidio-gallery plugin (v1.1 and earlier). A reflected XSS vulnerability exists in the plugin (notably in popup-insert-help.php) that could allow an attacker to execute arbitrary script in the victim’s browser, potentially stealing cookies or session da...
