PT-2020-11995 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: An issue was discovered that allows incorrect access control in the SQL fieldtype of com fields, enabling access for non-superadmin users. Recommendations: For versions prior to 3.9.16, update to...

Joomla! access control error vulnerability (CNVD-2020-20997)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An access control error vulnerability exists in Joomla! versions 2.5.0 through 3.9.15, which stems from a failure to perform ACL checks for various...

CVE-2020-10196: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated attacker to insert malicious JavaScript in several o...

mundoanuncio1.com Cross Site Scripting vulnerability

Security Researcher maxomaxa Helped patch 1067 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting mundoanuncio1.com website and its users. Following...

icn2017.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116567 Security Researcher maxomaxa Helped patch 1067 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting icn2017.com website and it...

a-frame.upstate-101.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116136 Security Researcher geeknik Helped patch 8881 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting a-frame.upstate-101.com...

groove3.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1115894 Security Researcher Dipu1A Helped patch 1022 vulnerabilities Received 6 Coordinated Disclosure badges Received 22 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting groove3.com website and its...

fabulousover50.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1115469 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting fabulousover50.com website...

divxfilmler1.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1115351 Security Researcher geeknik Helped patch 8703 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting divxfilmler1.com website a...

opthamology101.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1114713 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting opthamology101.com website...

efsaneyayin17.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1114605 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

stauto1.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8610 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting stauto1.com website and its users. Following coordinated a...

stylestore360.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1113884 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting stylestore360.com website...

turkbettv4.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1113612 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting turkbettv4.com website and...

ph9.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112958 Security Researcher geeknik Helped patch 8881 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ph9.com website and its...

meridianmetiz40.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112920 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting meridianmetiz40.com websit...

dancinfit247.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112176 Security Researcher geeknik Helped patch 8803 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dancinfit247.com website a...

arsenal48.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112143 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting arsenal48.com website and...

hw2.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hw2.com website and its users. Following coordinated and...

ejournal12.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1111588 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ejournal12.com website an...