The7 < 11.6.1 - Reflected XSS

The plugin does not sanitise and escape a parameter from the legacy DT Flickr widget before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

SUSE CVE-2012-4511

services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...

SUSE CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

CVE-2009-10002

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2009-10002 dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2009-10002 dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2009-10002

The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...

PT-2023-9870 · Unknown · Dpup Fittr-Flickr

Name of the Vulnerable Software and Affected Versions: dpup fittr-flickr affected versions not specified Description: A vulnerability has been found in dpup fittr-flickr, affecting some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The...

Fittr Flickr 跨站脚本漏洞

Fittr Flickr is a Chrome extension for the photo-sharing website Flickr. A cross-site scripting vulnerability exists in Fittr Flickr, which stems from some unknown handling of the file fittr-flickr/features/easy-exif.js in the component EXIF preview handler, which is manipulated to cause cross-si...

Flickr: Exceed photo dimensions, Flickr.com

Large negative numbers could be provided as a note's width and heigh which would be interpreted as positive integers and create notes beyond the normal size boundaries...

Flickr: IDOR may allow access to non-public photos

The IDOR vulnerability may have allowed access to non-public photos on Flickr. By adding discovered photo IDs for non-public photos uploaded by others to a Flickr group, the attacker could gain access to the third-party photos through their membership in the group...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Cross site scripting

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

CVE-2022-3021 affects the Slickr Flickr WordPress plugin up to version 2.8.1. The vulnerability is a stored XSS caused by insufficient sanitization and escaping of plugin settings, exploitable by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Impact is cross-site scr...

CVE-2022-3021 Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin Slickr Flickr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-20021 · WordPress · Slickr Flickr Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Slickr Flickr WordPress plugin versions through 2.8.1 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings. This can occur eve...