5 matches found
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
CVE-2015-9317: Improper Neutralization of Input During Web Page Generation
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
PT-2019-7276
Name of the Vulnerable Software and Affected Versions awesome-support plugin versions prior to 3.1.7 Description The issue allows for XSS via custom information messages. Recommendations For versions prior to 3.1.7, update to version 3.1.7 or later to resolve the issue...
satellite: XSS flaw in custom system information key handling
Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...