8 matches found
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
MAL-2025-18496 Malicious code in disher (npm)
The package disher was found to contain malicious code...
CVE-2019-18496
CVE-2019-18496 is rejected/not used per the initial description and does not represent an active vulnerability.
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
CVE-2017-18496
Summary for CVE-2017-18496 : The WordPress htaccess plugin from BestWebSoft, prior to version 1.7.6, contains multiple Cross‑Site Scripting (XSS) flaws. Technical details across sources indicate the vulnerability resides in the htaccess plugin’s handling of user-supplied data, enabling an authent...
CVE-2018-18496
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...
CVE-2018-18496
CVE-2018-18496 is a clickjacking vulnerability in Mozilla Firefox’s feed preview page about:feeds. When the RSS Feed preview is framed in another page, scripted content can coerce a user into downloading and executing an executable from a temporary directory. It affects Firefox versions earlier t...