WordPress Plugin Featurific For WordPress 1.6.2 - 'snum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50779/info Featurific For WordPress plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50784/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

PrestaShop 1.4.4.1 - '/modules/mondialrelay/googlemap.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50784/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin Adminimize 1.7.21 - page Cross-Site Scripting

WordPress Plugin Adminimize 1.7.21 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/50745/info Adminimize plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

WordPress Plugin Lanoba Social 1.0 - action Cross-Site Scripting

WordPress Plugin Lanoba Social 1.0 - action Cross-Site Scripting source: https://www.securityfocus.com/bid/50746/info Lanoba Social Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

WordPress Plugin Adminimize 1.7.21 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50745/info Adminimize plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

WordPress Plugin Flexible Custom Post Type - id Cross-Site Scripting

WordPress Plugin Flexible Custom Post Type - id Cross-Site Scripting source: https://www.securityfocus.com/bid/50719/info Flexible Custom Post Type plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50719/info Flexible Custom Post Type plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! Component comalfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50637/info Joomla! 'comalfcontact' extension is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

AShop - Open Redirection Cross-Site Scripting

AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...

PT-2011-4811

Name of the Vulnerable Software and Affected Versions Iwate Portal Bar affected versions not specified Description A cross-site scripting XSS issue exists in the RSS/Atom feed-reader implementation, allowing remote attackers to inject arbitrary web script or HTML via a crafted feed. Recommendatio...

Iwate Portal Bar vulnerable to arbitrary script execution

Overview Iwate Portal Bar is vulnerable to arbitrary script execution. Iwate Portal Bar is an add-on to Internet Explorer that adds a toolbar and provides multiple functions. The RSS/Atom feed reader function in Iwate Portal Bar is vulnerable to arbitrary script execution due to the improper...

JVN#33861625: Iwate Portal Bar vulnerable to arbitrary script execution

Iwate Portal Bar is an add-on to Internet Explorer that adds a toolbar and provides multiple functions. The RSS/Atom feed reader function in Iwate Portal Bar is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information. Impact An...

PT-2014-2146

Name of the Vulnerable Software and Affected Versions IcedTea-Web versions 1.0.x through 1.0.5 IcedTea-Web versions 1.1.x through 1.1.3 Description The issue allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended...

ChaSen -- buffer overflow

JVN iPedia reports: ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains an issue when reading in strings, which may lead to a buffer overflow. An arbitrary script may be executed by an attacker with access to a system...

XAMPP 1.7.7 - 'PHP_SELF' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50564/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

WebObjects vulnerable to cross-site scripting

Overview WebObjects provided by Apple, contains a cross-site scripting vulnerability. WebObjects provided by Apple is a web application server. WebObjects contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC...

WordPress Theme Bonus 1.0 - s Cross-Site Scripting

WordPress Theme Bonus 1.0 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/50527/info The Bonus theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

WordPress Theme Bonus 1.0 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50527/info The Bonus theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

CmyDocument - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50512/info CmyDocument is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...