172 matches found
CVE-2018-13423
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...
CVE-2018-13423
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...
CVE-2018-13423
Affected product: Omeka prior to 2.6.1. Vulnerability: Cross-site scripting (XSS) in admin/themes/default/items/tag-form.php triggered by adding or editing a tag. Root cause / nature: The description indicates an XSS flaw in the tag form handling. Impact (as stated): arbitrary script/HTML may be ...
CVE-2018-13423: Improper Neutralization of Input During Web Page Generation
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...
PT-2018-11818
Name of the Vulnerable Software and Affected Versions Omeka versions prior to 2.6.1 Description The issue allows for XSS by adding or editing a tag, specifically in the admin/themes/default/items/tag-form.php file. Recommendations For Omeka versions prior to 2.6.1, update to version 2.6.1 or late...
staropolska.pl XSS vulnerability
Open Bug Bounty ID: OBB-582626 Description| Value ---|--- Affected Website:| staropolska.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jelzontech.com XSS vulnerability
Open Bug Bounty ID: OBB-577636 Description| Value ---|--- Affected Website:| jelzontech.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
theiia.kr XSS vulnerability
Open Bug Bounty ID: OBB-577635 Description| Value ---|--- Affected Website:| theiia.kr Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...
acquirecareers.com XSS vulnerability
Open Bug Bounty ID: OBB-561001 Description| Value ---|--- Affected Website:| acquirecareers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-13234
Name of the Vulnerable Software and Affected Versions Securimage versions 3.6.4 and earlier Securimage versions prior to 3.6.6 Description The issue allows remote attackers to inject arbitrary HTML into an e-mail message body via the HTTP USER AGENT parameter to "example form.ajax.php" or "exampl...
beatthegmat.com XSS vulnerability
Open Bug Bounty ID: OBB-381466 Description| Value ---|--- Affected Website:| beatthegmat.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Open Redirect
WordPress is vulnerable to open redirect attacks. It is possible because the library does not properly validate the external URL in wphttpreferer in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, allowing attackers to redirect users to a different website...
Open redirect
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
CVE-2017-14725
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
CVE-2017-14725
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
CVE-2017-14725
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
CVE-2017-14725
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
CVE-2017-14725: URL Redirection to Untrusted Site
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...
PT-2017-13654
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.8.2 Description The issue allows for an open redirect attack. This is related to the files wp-admin/edit-tag-form.php and wp-admin/user-edit.php. Recommendations For versions prior to 4.8.2, update to version 4.8....
PT-2017-11008
Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue arises from insufficient input sanitization in the edit.php form and event form.php code, allowing for blind SQL injection attacks via the event parameter. Recommendations For versio...