CVE-2022-4827

The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4827

Summary: CVE-2022-4827 affects the WP Tiles WordPress plugin up to version 1.1.2. The vulnerability stems from insufficient validation/escaping of shortcode attributes, allowing stored XSS when a user with contributor+ privileges renders a page/post containing the shortcode. Impact is stored XSS ...

CVE-2022-4827 WP Tiles <= 1.1.2 - Contributor+ Stored XSS

The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Security Bulletin: Multiple security vulnerabilities in QRadar, QRM, QVM (CVE-2014-0837, CVE-2014-4833, CVE2014-4830, CVE-2014-4827, CVE-2014-4828, CVE-2014-4825)

Summary Multiple security vulnerabilities have been discovered in IBM QRadar, IBM QRadar Vulnerability Manager QVM and IBM QRadar Risk Manager QRM. Vulnerability Details CVE ID: CVE-2014-0837 DESCRIPTION: IBM QRadar is vulnerable due incorrect handing of an SSL connection, caused by the autoupdat...

RHEL 7 : OpenShift Container Platform 3.11.569 (RHSA-2021:4827)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4827 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

CVE-2020-4827

creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:38+00:00| seen| https://t.me/cibsecurity/23087...

CVE-2020-4827

IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841...

CVE-2020-4827

CVE-2020-4827 affects IBM API Connect: vulnerable in IBM API Connect 10.0.0.0–10.0.1.0 and 2018.4.1.0–2018.4.1.13 to CSRF, enabling malicious actions transmitted from a trusted user. The CVSS base score is 4.3 (MEDIUM). Remediation is to upgrade to IBM API Connect 2018.4.1.15 or 10.0.1.1 (per the...

Security Bulletin: IBM API Connect is vulnerable to cross-site request forgery (CSRF) (CVE-2020-4827)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4827 DESCRIPTION: IBM API Connect is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the websi...

Debian DSA-4827-1 : firefox-esr - security update

A security issue was found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4827. The text itself is...

Oracle Linux 8 : oniguruma (ELSA-2020-4827)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4827 advisory. 6.8.2-2 - Fix CVE-2019-13225 Resolves: 1771052 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 8 : oniguruma (RHSA-2020:4827)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4827 advisory. Oniguruma is a regular expressions library that supports a variety of character encodings. Security Fixes: oniguruma: NULL pointer dereference in...

CVE-2019-4827

...

CVE-2019-4827

CVE-2019-4827 entry is rejected/not used; this CVE ID is not an active vulnerability entry.

CVE-2017-4827

...

CVE-2017-4827

CVE-2017-4827 is rejected and does not represent an active vulnerability entry.

CVE-2016-4827

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827...

CVE-2016-4827

CVE-2016-4827 describes a cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce WordPress plugin prior to version 1.8.3. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The source documents do not specify the exact vulnerable c...

CVE-2016-4827

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826...