2168 matches found
CVE-2015-9522: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2015-9505: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because addqueryarg is misused...
CVE-2015-9532: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads EDD Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2019-17179: Improper Neutralization of Input During Web Page Generation
4.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5.0.1.3, 5.0.1.4, 5.0.1.5, 5.0.1.6, 5.0.1.7, 5.0.2, fixed in version 5.0.2.1...
CVE-2019-11656: Improper Neutralization of Input During Web Page Generation
Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2019-14911: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS...
CVE-2019-13538: Improper Neutralization of Input During Web Page Generation
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source...
CVE-2018-21012: Improper Neutralization of Input During Web Page Generation
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS...
CVE-2019-15713: Improper Neutralization of Input During Web Page Generation
The my-calendar plugin before 3.1.10 for WordPress has XSS...
CVE-2015-9357: Improper Neutralization of Input During Web Page Generation
The akismet plugin before 3.1.5 for WordPress has XSS...
CVE-2015-9342: Improper Neutralization of Input During Web Page Generation
The wp-rollback plugin before 1.2.3 for WordPress has XSS...
CVE-2019-15331: Improper Neutralization of Input During Web Page Generation
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...
CVE-2016-10910: Improper Neutralization of Input During Web Page Generation
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues...
CVE-2019-15110: Improper Neutralization of Input During Web Page Generation
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS...
CVE-2016-10908: Improper Neutralization of Input During Web Page Generation
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
CVE-2014-10377: Improper Neutralization of Input During Web Page Generation
The cforms2 plugin before 13.2 for WordPress has XSS in libajax.php...
CVE-2018-20978: Improper Neutralization of Input During Web Page Generation
The wp-all-import plugin before 3.4.7 for WordPress has XSS...
CVE-2017-18567: Improper Neutralization of Input During Web Page Generation
The wp-all-import plugin before 3.4.6 for WordPress has XSS...