CVE-2016-6634

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DEBIAN-CVE-2016-6634

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section...

WikWiki 2.1 Cross Site Scripting

Exploit Title: WikWiki - Reflected XSS Date: 2016-08-01 Exploit Author: HaHwul Vendor Homepage: https://github.com/smasty/WikWiki Software Link: https://github.com/smasty/WikWiki/archive/master.zip Version: v2.1 Tested on: DebianWhezzy CVE : none Vulnerability Point Edit page is not filtered...

Multiple Vulnerabilities in Wordpress Event-Registration Plugin

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Event-Registratio is one of the plugins for managing registrations and payments online. HTML injection vulnerability and SQL injection vulnerability exists in the Wordpress Event-Registration plugin, which can ...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Django CMS 'Groups' HTML Injection Vulnerability

Django CMS is Django Software Foundation of a set of open source based on the Django framework for content management systems . Django CMS suffers from an HTML injection vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Thomson TWG850 has multiple vulnerabilities

The Thomson TWG850 is a router product from Thomson Reuters USA. The Thomson TWG850 suffers from HTML injection, authentication bypass, and cross-site request forgery vulnerabilities. An attacker could use these vulnerabilities to steal cookie-based authentication, execute arbitrary code in an...

WordPress WP Advanced Comment Plugin HTML Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation.WP Advanced Comment is one of the Ajax-based comment plugins. An HTML injection vulnerability exists in the WordPress WP Advanced Comment plugin. An attacker can exploit this vulnerabilit...

Multiple Vulnerabilities in ZOHO ManageEngine EventLog Analyzer

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. HTML injection vulnerabilities and cross-site scripting vulnerabilities exist in ZOHO ManageEngine EventLog Analyzer version 11.0 Build 11000. These vulnerabilities can be...

Wordpress ProjectTheme has multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.ProjectTheme is one of the plugins used to create project themes. Wordpress ProjectTheme has HTML injection, cross-site scripting, cross-site request forgery, and information disclosure...

Multiple Vulnerabilities in ZOHO ManageEngine Password Manager Pro

ZOHO ManageEngine Password Manager Pro PMP is a set of U.S. ZOHO ZOHO password management software. ZOHO ManageEngine PMP suffers from HTML injection, user enumeration, cross-site request forgery, power lifting, security bypass, and authentication bypass vulnerabilities. An attacker can exploit...

Multiple vulnerabilities in concrete5 (CNVD-2016-05229)

concrete5 is a free content management system CMS developed by Portland Labs in the United States. concrete5 5.7.3.1 and earlier versions contain 1. cross-site request forgery vulnerability 2. HTML injection vulnerability 3. local file inclusion vulnerability, a remote attacker can use these...

WordPress Jetpack Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Jetpack is one of the plugin packages that includes a variety of features such as social sharing, social login and social commenting. An HTML injection vulnerability exists in WordPress...

Multiple Vulnerabilities in ZOHO ManageEngine OpManager

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. The software provides monitoring configuration, alarms and notifications, monitoring reports and other functions. HTML injection vulnerabilities, cross-site scripting vulnerabilities,...

Joomla! SecurityCheck and SecurityCheck Pro Extension HTML Injection Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . SecurityCheck and SecurityCheck Pro are among the network security extension components. An HTML injection vulnerability exists ...

WordPress All in One SEO Pack Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation.All in One SEO Pack is one of the SEO optimized plugins. An HTML injection vulnerability exists in the WordPress All in One SEO Pack plugin version 2.3.6.1, which can be exploited by an attacker to...

WordPress Live Chat Support Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. An HTML injection vulnerability exists in versions of the WordPress Live Chat Support plugin prior to 6.2.02, which can be exploited by an attacker to run arbitrary...

Log pollution can potentially lead to local HTML injection - ownCloud

The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...

Server: Log pollution can potentially lead to local HTML injection

The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...