2022 matches found
CVE-2015-6535
Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...
CVE-2015-6535
This CVE concerns WordPress YouTube Embed plugin (software: YouTube Embed; version 3.3.2, potentially earlier) with a stored XSS in includes/options-profiles.php. The vulnerability arises from unsanitized input in the Profile name field (youtube_embed_name parameter), allowing an admin user to in...
CVE-2015-6535: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...
PT-2015-7291
Name of the Vulnerable Software and Affected Versions YouTube Embed plugin versions prior to 3.3.3 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote administrators to inject arbitrary web script or HTML via the youtube embed name parameter in the Profi...
WordPress YouTube Embed 3.3.2 Cross Site Scripting Vulnerability
WordPress YouTube Embed plugin version 3.3.2 suffers from a stored cross site scripting vulnerability. Details ================ Software: YouTube Embed Version: 3.3.2 Homepage: https://wordpress.org/plugins/youtube-embed/ CVE ID: CVE-2015-6535 Pending CWE ID: CWE-79 CVSS: 5.5 Medium;...
WordPress YouTube Embed 3.3.2 Cross Site Scripting
Details ================ Software: YouTube Embed Version: 3.3.2 Homepage: https://wordpress.org/plugins/youtube-embed/ CVE ID: CVE-2015-6535 Pending CWE ID: CWE-79 CVSS: 5.5 Medium; AV:N/AC:L/Au:S/C:P/I:P/A:N Description ================ A stored XSS vulnerability in YouTube Embed 3.3.2 and...
Shopify - Persistent Embed POST Inject Vulnerability
Document Title: =============== Shopify - Persistent Embed POST Inject Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1556 Video View: https://www.youtube.com/watch?v=5qiJ4UjJtQ Release Date: ============= 2015-08-13 Vulnerability Laboratory ID VL-ID:...
WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting
This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...
WordPress XVE Various Embed Plugin <= 1.0.3 - Cross Site Scripting
This plugin is prone to JW player multiple cross site scripting vulnerabilities. Solution Update the plugin...
WordPress Embed Plus Plugin <= 5.3 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress plugin Embed-Articles/wp-admin/admin.php cross-site request forgery vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Embed-Articles/wp-admin/admin.php, which allows a...
WordPress Embed Articles Plugin <= 7.0.3 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Attackers can insert arbitrary script into admin page, hijack admin's cookies etc. Solution This plugin is closed...
WordPress Embed Articles Plugin <= 7.0.3 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Attackers can insert arbitrary script into admin page, hijack admin's cookies etc. Solution This plugin is closed...
WordPress Advanced Video Embed File Disclosure
File disclosure vulnerability in WordPress Advanced Video Embed plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
phpok 最新版储存型xss。
简要描述： rt 详细说明： 看到出了论坛这个新功能 xss过滤还是不够哦。 两处问题。 发布帖子处， 1 正则貌似有问题。 换行就绕过了对 onxxx的检测。 2 测试代码 漏洞证明：...
NASA Orion - Bypass, Persistent Issue & Embed Code Exec
Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Exec References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...
NASA Orion (Mars) Filter Bypass / Persistent Cross Site Scripting
Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...
Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS
The Code Embed WordPress plugin was affected by a wp-admin/admin.php suffix Parameter XSS security vulnerability...
XVE Various Embed - JW Player Multiple Cross-Site Scripting Vulnerabilities
The XVE Various Embed WordPress plugin was affected by a JW Player Multiple Cross-Site Scripting Vulnerabilities security vulnerability...