WordPress 跨站脚本漏洞

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...

myfactory.FMS 跨站脚本漏洞

myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's Error parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...

myfactory.FMS 跨站脚本漏洞

myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's UID parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress Tutor LMS plugin in versions prior to 1.9.9 has a cross-site scripting vulnerability, which stems from the plugin's...

Security Risks of Client-Side Scanning

Even before Apple made its announcement, law enforcement shifted their battle for backdoors to client-side scanning. The idea is that they wouldnt touch the cryptography, but instead eavesdrop on communications and systems before encryption or after decryption. Its not a cryptographic backdoor, b...

OMERO.web跨站脚本漏洞

OMERO.web is a client program from the Open Microscopy Environment team for viewing images on the OMERO server from a web browser. A cross-site scripting vulnerability exists in omero-web that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit...

Tuleap Open ALM 跨站脚本漏洞

Enalean Tuleap Open Alm is a free and open source tool from Enalean France. It is used for end-to-end traceability of application and system development. Tuleap Open ALM suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by a WEB...

Adobe Campaign Classic 跨站脚本漏洞

Adobe Campaign Classic ACC is a suite of cross-channel customer experience marketing platforms from the American company Audobee Adobe. The platform features real-time interaction management, Adobe Experience Cloud integration, data management and integration. A cross-site scripting vulnerability...

in jspark311/buriedunderthenoisefloor

Description Uploaded files represent a significant risk to applications. The first step in many attacks is to get some code to the system to be attacked. Then the attack only needs to find a way to get the code executed. https://github.com/jspark311/BuriedUnderTheNoiseFloor/ is vulnerable to remo...

WordPress Coming soon and Maintenance plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of the WordPress Coming soon and Maintenance plugin...

WordPress wpDiscuz plugin cross-site scripting vulnerability

WordPress plugin is a WordPress application plugin. WordPress wpDiscuz plugin 7.3.0 and prior versions contain a cross-site scripting vulnerability that stems from the plugin's failure to properly clean up or escape Follow and Unfollow messages before outputting them to the page. An attacker coul...

WordPress Duplicate Page plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Duplicate Page plugin 4.4.2 and earlier versions, whi...

WordPress Enfold Enfold theme cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of WordPress Enfold Enfold theme prior to 4.8.4, which originate...

WordPress Appointment Hour Booking plugin cross-site scripting vulnerability (CNVD-2022-86554)

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress Appointment Hour Booking plugin prior to 1.3.17, which stems from a lack of validation of user input data and filtering of input data for the...

Online Dj Booking Management System 跨站脚本漏洞

Online Dj Booking Management System is an online Dj booking management system by the individual developer Anuj Kumar. Online DJ Booking Management System suffers from a cross-site scripting vulnerability that originates from Online DJ Booking Management System 1.0 in view-booking-detail.php. An...

Tad Uploader Cross-Site Scripting Vulnerability

Tad Uploader is a file upload management module by the individual developer of Tad in Taiwan, China. A cross-site scripting vulnerability exists in Tad Uploader, which stems from the failure of the add subject of the book list function in the product to properly filter certain special characters...

Tad TadTools Cross-Site Scripting Vulnerability

Tad TadTools is a module toolkit for individual developers at Tad in Taiwan, China. Used for module development, it can dramatically reduce the size of each module and speed up the development process. Tad TadTools suffers from a cross-site scripting vulnerability that originates from the lack of...

Tad Book3 Cross-Site Scripting Vulnerability

Tad Book3 is an XOOPS module by the individual developer of Tad in Taiwan, China, which can be used to write books, handouts, and as a notepad. Tad Book3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An...

WordPress 插件 跨站脚本漏洞

WordPress plugin is a WordPress application plugin. WordPress wpDiscuz plugin 7.3.0 and prior versions contain a cross-site scripting vulnerability that stems from the plugin's failure to properly clean up or escape Follow and Unfollow messages before outputting them to the page. An attacker coul...

JEECMS Cross-Site Scripting Vulnerability (CNVD-2021-88950)

Jeecms is China's Jinlei Technology Development Jeecms company's set of content management system CMS developed using the Java language. A cross-site scripting vulnerability exists in JEECMS, which originates from the product's /member-vipcenter.htm page that does not validate user input data. An...