7978 matches found
CVE-2014-7956
Cross-site scripting XSS vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php...
PT-2015-4280
Name of the Vulnerable Software and Affected Versions MyWebsiteAdvisor Simple Security plugin versions 1.1.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the datefilter parameter in the "access log" page to...
PT-2015-3938
Name of the Vulnerable Software and Affected Versions HP Insight Control affected versions not specified Description A cross-site scripting XSS issue exists in the server, allowing remote attackers to inject arbitrary web script or HTML. The exact vectors used for the injection are not specified...
CVE-2014-100027
Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-100018
Cross-site scripting XSS vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php...
Cross site scripting
Cross-site scripting XSS vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username...
Cross site scripting
Cross-site scripting XSS vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the 1 sEcho parameter to commentspaginate.php or 2 storespaginate.php or the 3 affiliateurl, 4 description, 5 domain, 6...
Cross site scripting
Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...
CVE-2014-100028
Cross-site scripting XSS vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2014-100030
Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...
CVE-2014-100026
The CVE-2014-100026 entry corresponds to a readme.php-based XSS in WordPress plugin “April’s Super Functions Pack” prior to version 1.4.8. The vulnerability allows an attacker to inject arbitrary script or HTML via the page parameter, enabling cross-site scripting. The affected product is the Wor...
CVE-2014-10003
Multiple cross-site scripting XSS vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to 1 uploader/admin/js/loadflv.js.php or 2 uploader/js/loadflv.js.php...
CVE-2014-100007
Cross-site scripting XSS vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi when resconfigid is set to 41...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 notes parameter to the client page; 4 insuname or 5 price parameter to the addinsurancecat page; or 6 status parameter to the...
CVE-2014-10009
Multiple cross-site scripting XSS vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 notes parameter to the client page; 4 insuname or 5 price parameter to the addinsurancecat page; or 6 status parameter to the...
PT-2015-3631
Name of the Vulnerable Software and Affected Versions Seo Panel versions prior to 3.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue...
