WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting XSS Google Dork: NA Date: 09/01/2021 Exploit Author: Swapnil Subhash Bodekar Vendor Homepage: Software Link: https://wordpress.org/plugins/custom-global-variables/developers Version: 1.0.5 Tested on...

WordPress Custom Global Variables plugin <= 1.0.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Swapnil Subhash Bodekar in WordPress Custom Global Variables plugin versions = 1.0.5. Solution Update the Custom Global Variables plugin to the latest available version at least 1.1.1...

WordPress Custom Global Variables 1.0.5 Cross Site Scripting

Exploit Title: WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting XSS Google Dork: NA Date: 09/01/2021 Exploit Author: Swapnil Subhash Bodekar Vendor Homepage: Software Link: https://wordpress.org/plugins/custom-global-variables/developers Version: 1.0.5 Tested on...

Cross-site Scripting (XSS)

wordpress is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the addLoadEvent function in admin-header.php where an attacker is able to inject malicious script via global variables and get it executed when a user visits the page...

FreeBSD : wordpress -- multiple issues (11325357-1d3c-11eb-ab74-4c72b94353b5)

wordpress developers reports : Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues : -Props to Alex Concha of the WordPress Security Team for their work in...

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

DEBIAN-CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

UBUNTU-CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

Cross site scripting

WordPress before 5.5.2 allows XSS associated with global variables...

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

VulnCheck KEV: CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

WordPress <= 5.5.1 - Cross-Site Scripting (XSS) via Global Variables vulnerability

Cross-Site Scripting XSS via Global Variables vulnerability found by Marc Montas in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...

wordpress -- multiple issues

wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: -Props to Alex Concha of the WordPress Security Team for their work in...

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...

Strapi Input Validation Error Vulnerability

Strapi is an open source headless content management system CMS. A security vulnerability exists in versions of Strapi prior to 3.0.2, which arises from the program storing templates in global variables after failing to perform arbitrary cleanup operations. A remote attacker can exploit this...

Unspecified Vulnerability in Facade Ignition for Laravel

Facade Ignition for Laravel is a customizable error page from Facade Belgium that runs in the Laravel web framework. A security vulnerability exists in Facade Ignition versions prior to 2.0.5 Laravel, which stems from the program not handling global variables get, post, cookie and env correctly. ...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A flaw was found in handling of dynamic changes to global variables. A script which used certain functions which change global variables could be forced to enable the registerglobals configuration option, possibly resulting in global variable injecti...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A flaw was found in the way the mbstring extension set global variables. A script which used the mbparsestr function to set global variables could be forced to enable the registerglobals configuration option, possibly resulting in global variable...