CVE-2017-20092 Google Analytics Dashboard Plugin cross site scriting

A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely...

CVE-2017-20092

The CVE-2017-20092 entry concerns the Google Analytics Dashboard Plugin version 2.1.1 for WordPress. The available description states that an unknown functionality is vulnerable to manipulation that leads to basic cross-site scripting (XSS), with remote attack capability. Connected sources consis...

GHSA-JHFV-8936-G652 Cross-site Scripting in Jenkins Hidden Parameter Plugin

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Cross-site Scripting in Jenkins Agent Server Parameter Plugin

Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-5HH2-F4H9-446G Cross-site Scripting in Jenkins Date Parameter Plugin

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability requires...

GHSA-FCQR-GH8W-WM8F Cross-site Scripting in Jenkins Readonly Parameter Plugin

Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross-site Scripting in Jenkins Hidden Parameter Plugin

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this...

Cross-site Scripting in Jenkins Maven Metadata Plugin

Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure...

CVE-2017-20086

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:26+00:00| seen| https://t.me/cibsecurity/44967...

CVE-2017-20088

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:24+00:00| seen| https://t.me/cibsecurity/44965...

CVE-2017-20091

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:24+00:00| seen| https://t.me/cibsecurity/44966...

CVE-2017-20087

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:22+00:00| seen| https://t.me/cibsecurity/44964...

CVE-2017-20089

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:21+00:00| seen| https://t.me/cibsecurity/44962...

CVE-2017-20090

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:20+00:00| seen| https://t.me/cibsecurity/44961...

CVE-2017-20085

creationtimestamp| type| source ---|---|--- 2022-06-23 12:29:19+00:00| seen| https://t.me/cibsecurity/44960...

CVE-2017-20088

A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

CVE-2017-20087

A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely...