CVE-2019-16187

Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script...

Mautic cross-site scripting vulnerability (CNVD-2019-31196)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Mautic version 2.13.1, which can be exploited by an attacker to execute client-side code...

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

WordPress CarSpot theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.CarSpot theme is a plugin used in one of the car sales website themes. A cross-site scripting vulnerability exists in...

WordPress redirection plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

WordPress iThemes Exchange Membership Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. membership Add-on is one of the plugins for website membership functionality. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Membership Add-on...

WordPress updraftplus plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress iThemes Exchange Easy US Sales Taxes Add-on Plugin Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. easy US Sales Taxes Add-on is one of the sales tax calculation plugins. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Easy US Sales Taxes Add-...

WordPress my-calendar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. my-calendar is a calendar customization plugin that is used in it. A cross-site scripting vulnerability exists in the WordPress...

Knowage Cross-Site Scripting Vulnerability

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WE...

WordPress redirection plugin cross-site scripting vulnerability (CNVD-2019-30388)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. redirection is a redirection management plugin used in it. A cross-site scripting vulnerability exists in the WordPress redirection...

WordPress Related Posts Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content. WordPress Related Posts plugin version 1.8.2 before the cross-site scripting...

WordPress sharebar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A cross-site scripting vulnerability exists in the WordPress shareba...

WordPress akismet plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. akismet is a spam filtering plugin used in it. A cross-site scripting vulnerability exists in the WordPress akismet plugin. An attacke...

WordPress gigpress plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A cross-site scripting vulnerability exists in the...

WordPress Jetpack plugin cross-site scripting vulnerability (CNVD-2019-30395)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Jetpack is one of the WordPress site security management tools used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress two-factor-authentication plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. two-factor-authentication is a two-factor authentication plugin used in it. A cross-site scripting vulnerability exists in the WordPre...

WordPress JobCareer theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.JobCareer theme is a plugin used in one of the job board themes. A cross-site scripting vulnerability exists in WordPress JobCareer the...

WordPress updraftplus plugin cross-site scripting vulnerability (CNVD-2019-30397)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress wp-vipergb plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. wp-vipergb is a message board plugin used in it. A cross-site scripting vulnerability exists in the WordPress wp-viper...