8060 matches found
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
Cross site scripting
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2016-10912
The CVE concerns the WordPress universal-analytics plugin, specifically versions before 1.3.1, which are reported to be vulnerable to cross-site scripting (XSS). The affected component is the universal-analytics plugin for WordPress; the root cause is not spelled out beyond the XSS description in...
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
Cross site scripting
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18556
The CVE pertains to the WordPress plugin bws-google-analytics (pre-1.7.1). The connected Nuclei template confirms multiple XSS flaws in the plugin before 1.7.1, enabling authenticated attackers to inject and execute arbitrary JavaScript in victims’ browsers (potential cookie/credentials leakage a...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18554
The CVE-2017-18554 entry involves the WordPress Analytics Tracker plugin prior to version 1.1.1, which is vulnerable to a cross-site scripting (XSS) flaw triggered via a search event. Affected component: the analytics-tracker plugin for WordPress. Root cause (as stated in connected references): i...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
WordPress bws-google-analytics plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...
Your Business is Compliant with Data Security Regulations. It’s Still not Safe.
There has been plenty of discussion about the impact of global data regulations on data security practices. Particularly with the implementation of the EU’s GDPR last year, organizations in every industry have been scrambling to develop new security practices to avoid fines and the associated bad...
How much personalization is too much?
This story originally ran in The Parallax on January 25, 2019, and was written by Dan Tynan. In 2012, when Target used data analytics to identify customers who were expecting a baby, then mailed them coupons for maternity clothing and nursery furniture, it inadvertently revealed a teenage girl’s...
PT-2019-3707 · Oracle +7 · Oracle Hospitality Reporting/Analytics +7
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Oracle Hospitality Reporting and Analytics affected versions not specified Description: The issue is related to inadequate access control in the Server: Optimizer component of MySQL Server and the Oracle...
HELK - The Hunting ELK
The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was developed...
cPanel Input Validation Error Vulnerability (CNVD-2019-29615)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in the API Analytics adminbin in versions prior to cPanel 80.0.5, no detailed vulnerability detai...