118 matches found
WordPress plugin uContext for Clickbank 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2022-17281 · WordPress · Ucontext For Clickbank
Name of the Vulnerable Software and Affected Versions: uContext for Clickbank plugin for WordPress versions up to, and including 3.9.1 Description: The issue is due to missing nonce validation in the /app/sites/ajax/actions/keyword save.php file, which is called via the doAjax function. This allo...
uContext for Clickbank <= 3.9.1 - Stored Cross-Site Scripting via CSRF
The plugin does not have CSRF check when saving its settings, and is also lacking sanitisation as well as escaping in some of them, which could allow attacker to make a logged in admin change them via a CSRF attack and put Cross-Site Scripting payloads in them...
WordPress uContext for Clickbank plugin <= 3.9.1 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS)
Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS discovered by Hayato Takizawa in WordPress uContext for Clickbank plugin versions = 3.9.1. Solution Deactivate and delete. This plugin has been closed as of July 26, 2022 and is not available for download. This...
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-95139)
WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin ClickBank Affiliate Ads version 1.20 before there is a cross-site scripting vulnerability,...
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-100244)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin ClickBank Affiliate Ads prior to...
CVE-2015-20106
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
CVE-2015-20105
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
Cross site scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
Cross site scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
CVE-2015-20106 ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
CVE-2015-20106
CVE-2015-20106 affects the WordPress plugin "ClickBank Affiliate Ads" up to version 1.20. The vulnerability is a stored Cross-Site Scripting (XSS) in the plugin’s settings due to insufficient escaping/non-filtering, enabling high-privilege users to inject scripts even when unfiltered_html is disa...
CVE-2015-20105 ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
CVE-2015-20105
The CVE-2015-20105 entry concerns the WordPress ClickBank Affiliate Ads plugin (versions up to 1.20). The vulnerability arises from a missing CSRF check when saving settings, enabling an authenticated attacker to modify settings via CSRF. Additionally, output escaping is insufficient, leading to ...
WordPress 跨站脚本漏洞
WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin ClickBank Affiliate Ads version 1.20 before there is a cross-site scripting vulnerability,...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin ClickBank Affiliate Ads prior to...
clickbank.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-711504 Description| Value ---|--- Affected Website:| clickbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...
WordPress Affiliate Ads for Clickbank Products plugin <= 1.6 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Affiliate Ads for Clickbank Products plugin versions = 1.6. It is vulnerable to a Cross-Site Scripting XSS vulnerability via the textadsajax.php bordercolor parameter. Solution Update the WordPress Affiliate Ads for...
WordPress Genie Affiliate Ads for Clickbank Products Plugin Cross-Site Scripting Vulnerability
MyCBGenie Affiliate Ads for Clickbank Products plugin is one of the advertisement plugins that are used in WordPress, a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers. MyCBGenie...