CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

EUVD-2022-35838

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

PT-2022-21452 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 and dev master commit 3f7c0364 Description: A cross-site scripting xss vulnerability exists in the footer alerts functionality. This issue allows for arbitrary Javascript execution through a specially-crafted HTTP...

WordPress Header Footer Code Manager Plugin < 1.1.24 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-0899

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0899

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0899 Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0899

CVE-2022-0899 affects the WordPress plugin Header Footer Code Manager prior to version 1.1.24. The vulnerability arises because generated URLs are not escaped before being output in admin page attributes, enabling Reflected Cross-Site Scripting. Exploitation context: authenticated attackers can i...

WordPress plugin Header Footer Code Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Malicious code in dw-header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece43619e69dba03ea7cc723377c5703397137721c477107801e86416e5886dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3580 Malicious code in header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview dw-header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in cms-component-layout-nyse-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 135f3d4b04a436d311af085eec0054e40ca77c5b1981c43dac75aed8c5e27670 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4995 Malicious code in o-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656f96d263183b67639a364665bcbc6f5ec7a73bca04af5336963724bdf8d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3581 Malicious code in header-footer-wix-statics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb1db1683d102f55c2cd954c6c3c39e01f2c49eef99cd785841d3d3541c772d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in header-footer-wix-statics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb1db1683d102f55c2cd954c6c3c39e01f2c49eef99cd785841d3d3541c772d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Icegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks Create/edit a campaign such as a Black Friday one, check the "Use Opt-in / Subscription / Lead capture form" settings and put...

GHSA-PGPH-MC4P-F8C3 phpMyAdmin unsanitized Git information

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php...