398 matches found
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the console image editing tool ImageMagick, which is related to infinite loop execution, allows a hacker to cause a service failure.
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially creat...
WordPress Elementor Website Builder 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...
WordPress 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...
ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in get_bits
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5213604790009856 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
MetaSlider < 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS)
Vishnupriya Ilango, from Fortinet's FortiGuard Lab, discovered a stored Cross-Site Scripting XSS vulnerability in Metaslider plugin v3.17.1, which exists in Image caption or description parameter in the slide creation module...
DRUPAL-CORE-2020-010
Drupal core's built-in CKEditor image caption functionality is vulnerable to XSS...
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2020-010
Drupal core's built-in CKEditor image caption functionality is vulnerable to XSS...
CVE-2020-14962
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title aka imageTitle or Caption aka description field of an image to wp-admin/admin-ajax.php...
CVE-2020-14962
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title aka imageTitle or Caption aka description field of an image to wp-admin/admin-ajax.php...
CVE-2020-14962
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title aka imageTitle or Caption aka description field of an image to wp-admin/admin-ajax.php...
CVE-2020-14962
The CVE-2020-14962 issue affects the WordPress Final Tiles Gallery/FTG Lite plugin (versions before 3.4.19). The underlying vulnerability is Cross-Site Scripting (XSS) in the image handling: attacker-supplied input in the image Title (imageTitle) or Description (caption) fields passed to wp-admin...
PT-2020-6784 · Unknown · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder versions up to, and including, 2.5.5.2 Description: The issue arises from insufficient input sanitization and output escaping of the caption parameter when uploading media files through the Beaver Builder editor. This allows...
PT-2020-6782 · Unknown · Beaver Builder
Name of the Vulnerable Software and Affected Versions: Beaver Builder versions up to, and including, 2.5.5.2 Description: The issue arises from insufficient input sanitization and output escaping in the 'Caption - On Hover' value associated with images. This allows authenticated attackers with...
CVE-2015-7344: Improper Neutralization of Input During Web Page Generation
HikaShop Joomla Component before 2.6.0 has XSS via an injected payload/caption...
CVE-2015-9419
The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...
Design/Logic Flaw
The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section...
CVE-2015-9419
CVE-2015-9419 affects the Captain Slider WordPress plugin, version 1.0.6, which is vulnerable to cross-site scripting via a Title or Caption section. The NVD records CVSS v2 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). No exploitation status or patches are detailed in the provid...
PT-2019-7378
Name of the Vulnerable Software and Affected Versions captain-slider plugin version 1.0.6 Description The issue is related to a cross-site scripting XSS problem. It occurs via a Title or Caption section, allowing potential exploitation. Recommendations For captain-slider plugin version 1.0.6,...