6686 matches found
CVE-2019-4133: Undefined Security Weakness
IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side with access to client computer to run a custom script. IBM X-Force ID: 158278...
WordPress zoho-salesiq plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. zoho-salesiq is one of the plug-ins used to track the behavior of website users. A cross-site scripting vulnerability exists in the...
WordPress wp-polls plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...
WordPress wp-rollback plugin cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-rollback plugin versions prior to 1.2.3. The vulnerability...
PT-2019-12923
Name of the Vulnerable Software and Affected Versions Symantec My VIP portal affected versions not specified Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users, potentially bypassing...
WordPress ckeditor-for-wordpress plugin cross-site scripting vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. ckeditor-for-wordpress is an editor plugin used in it. A cross-site scripting vulnerability exists in the 'built-in old...
PT-2019-16914 · Ibm · Ibm Cloud Automation Manager
Name of the Vulnerable Software and Affected Versions: IBM Cloud Automation Manager version 3.1.2 Description: The issue allows a malicious user on the client side, with access to the client computer, to run a custom script. Recommendations: For IBM Cloud Automation Manager version 3.1.2, conside...
WordPress tubepress plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. tubepress is an open source responsive video library plugin used in it. A cross-site scripting vulnerability exist...
WordPress ultimate-faqs plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ultimate-faqs is a FAQ plugin used in it. A cross-site scripting vulnerability exists in the WordPress ultimate-faqs plugin. An attack...
WordPress mailchimp-for-wp plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mailchimp-for-wp is a plugin used to send e-mail to subscribers. A cross-site scripting vulnerability exists in the WordPress...
WordPress event-notifier plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. event-notifier is a program exception event notification plugin used in it. A cross-site scripting vulnerability exists in the...
WordPress gnucommerce plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gnucommerce is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress gnucommerce plugin. A...
WordPress gnucommerce plugin cross-site scripting vulnerability (CNVD-2019-30576)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gnucommerce is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress gnucommerce plugin. A...
WordPress google-analyticator plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-analyticator is a plugin used in it to display and manage data from the Google Analytics website analytics or website traffic...
WordPress yikes-inc-easy-mailchimp-extender plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. yikes-inc-easy-mailchimp-extender is used in one of the user registration form to add plug-ins . A cross-site scripting...
Status Board Cross-Site Scripting Vulnerability
Status Board is a Nodejs-based dashboard framework. A cross-site scripting vulnerability exists in Status Board version 1.1.81, which can be exploited by an attacker to execute client-side code...
WordPress contact-form-plugin plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress time-sheets plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. time-sheets is an employee time management plugin used in it. A cross-site scripting vulnerability exists in the WordPress time-sheets...
WordPress peters-login-redirect plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. peters-login-redirect is a redirection plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress wassup plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wassup is a plugin for real-time statistical analysis of site visits. A cross-site scripting vulnerability exists in the WordPress...