WordPress Amen plugin <= 3.3.1 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Amen versions = 3.3.1...

Amen <= 3.3.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to...

Amen <= 3.3.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to...

WordPress Amen Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Amen Type Plugin Vulnerable versions = 3.3.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3992 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2ff20ea08709 Credits Bob Matyas Required privilege...

amen-onlus.it XSS vulnerability

Open Bug Bounty ID: OBB-453608 Description| Value ---|--- Affected Website:| amen-onlus.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

PHP-Nuke (friend.php) Module Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== PHP-Nuke friend.php Module Remote SQL Injection Vulnerability =============================================================== Exploit Title: PHP-Nuke 'friend.php' Module Remote SQ...