freethemes.space XSS vulnerability

Open Bug Bounty ID: OBB-669025 Description| Value ---|--- Affected Website:| freethemes.space Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hirezstudios.com XSS vulnerability

Open Bug Bounty ID: OBB-665747 Description| Value ---|--- Affected Website:| hirezstudios.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

satoriz.fr XSS vulnerability

Open Bug Bounty ID: OBB-663779 Description| Value ---|--- Affected Website:| satoriz.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ageliesergasias.gr XSS vulnerability

Open Bug Bounty ID: OBB-654798 Description| Value ---|--- Affected Website:| ageliesergasias.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| newspaper theme by tagdiv 8.1.1 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Design/Logic Flaw

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fwdata id1, fwdata id2, fwdata id3, fwdata id4, or email field of the contact form, exploitable with an fwsendemail action to wp-admin/admin-ajax.php...

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fwdata id1, fwdata id2, fwdata id3, fwdata id4, or email field of the contact form, exploitable with an fwsendemail action to wp-admin/admin-ajax.php...

PT-2018-12508

Name of the Vulnerable Software and Affected Versions Mondula Multi Step Form plugin versions prior to 1.2.6 Description The issue allows for XSS exploitation via specific fields in the contact form, including fw data id1, fw data id2, fw data id3, fw data id4, or the email field. This can be...

CVE-2018-14430: Improper Neutralization of Input During Web Page Generation

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fwdata id1, fwdata id2, fwdata id3, fwdata id4, or email field of the contact form, exploitable with an fwsendemail action to wp-admin/admin-ajax.php...

enggwave.com XSS vulnerability

Open Bug Bounty ID: OBB-652984 Description| Value ---|--- Affected Website:| enggwave.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| newspaper theme by tagdiv 8.1.1 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

PT-2018-12551

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue concerns SQL Injection in the manager/admin ajax.php file. This can be exploited by sending crafted POST data, for example, a substring like "m id=1 AND SLEEP5". Recommendations For joyplus-cms...

PT-2018-12483

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue is related to SQL Injection, which can be exploited via the val parameter in the "manager/admin ajax.php" API endpoint. Recommendations For joyplus-cms version 1.6.0, avoid using the val paramete...

PT-2018-12482

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue allows for XSS via the "manager/admin ajax.php" API endpoint, specifically through the can search device array parameter. Recommendations For joyplus-cms version 1.6.0, consider restricting acces...

mfk-falken.dk XSS vulnerability

Open Bug Bounty ID: OBB-638057 Description| Value ---|--- Affected Website:| mfk-falken.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

missadventure.de XSS vulnerability

Open Bug Bounty ID: OBB-638053 Description| Value ---|--- Affected Website:| missadventure.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mairie-longuesse.fr XSS vulnerability

Open Bug Bounty ID: OBB-638048 Description| Value ---|--- Affected Website:| mairie-longuesse.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lefrancaispourtous.fr XSS vulnerability

Open Bug Bounty ID: OBB-638046 Description| Value ---|--- Affected Website:| lefrancaispourtous.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

la-chataigneraie.fr XSS vulnerability

Open Bug Bounty ID: OBB-638042 Description| Value ---|--- Affected Website:| la-chataigneraie.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

helhets-halsan.se XSS vulnerability

Open Bug Bounty ID: OBB-638041 Description| Value ---|--- Affected Website:| helhets-halsan.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jci-shertogenbosch.nl XSS vulnerability

Open Bug Bounty ID: OBB-638040 Description| Value ---|--- Affected Website:| jci-shertogenbosch.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mairie-plouisy.fr XSS vulnerability

Open Bug Bounty ID: OBB-638039 Description| Value ---|--- Affected Website:| mairie-plouisy.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...