4511 matches found
WordPress Breezing Forms 1.2.7.42 Cross Site Scripting Vulnerability
WordPress Breezing Forms plugin version 1.2.7.42 suffers from a cross site scripting vulnerability. Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Breezing Forms Plugin 1.2.7.42 Breezing Forms Plugin is prone to a stored cross-site scripting vulnerability because it fai...
WordPress Emag Marketplace Connector 1.0 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Emag Marketplace Connector 1.0 Emag Marketplace Connector Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize...
WordPress Emag Marketplace Connector 1.0 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Emag Marketplace Connector 1.0 Emag Marketplace Connector Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to...
WordPress Advanced Post Type Ratings 1.1 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Advanced Post Type Ratings Plugin 1.1 DFD Reddcoin Tips Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to...
WordPress amtyThumb 8.1.3 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable amtyThumb posts Plugin 8.1.3 amtyThumb posts Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
WordPress AMP Toolbox 1.9.4 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable AMP Toolbox Plugin 1.9.4 AMP Toolbox Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...
WordPress Cartogiraffe Map 1.0 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Cartogiraffe Map Plugin 1.0 Cartogiraffe Map Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
WordPress Secure HTML5 Video Player 3.14 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Secure HTML5 Video Player Plugin 3.14 Secure HTML5 Video Player Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issu...
WordPress Duplicator Migration 1.2.28 Cross Site Scripting Vulnerability
WordPress Duplicator Migration plugin version 1.2.28 suffers from a cross site scripting vulnerability. Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Duplicator a WordPress Migration Plugin 1.2.28 Duplicator a WordPress Migration Plugin is prone to a stored cross-site...
WordPress Duplicator Migration 1.2.28 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Duplicator a WordPress Migration Plugin 1.2.28 Duplicator a WordPress Migration Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...
The vulnerability of the Locator/ID Separation (LISP) protocol implementation in Cisco IOS allows a hacker to bypass the authentication process.
The vulnerability of the Locator/ID Separation LISP protocol implementation in Cisco IOS is related to defects in the authentication process logical error. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using special registration requests that trigg...
WordPress Pootle Button 1.1.1 Cross Site Scripting
Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable Pootle button plugin 1.1.1 Pootle button plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability
WordPress 2kb Amazon Affiliates Store plugin versions 2.1.0 and below suffer from a cross site scripting vulnerability. WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting Vulnerability Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon...
WordPress 2kb Amazon Affiliates Store 2.1.0 Cross Site Scripting
Class Input Validation Error CVE Remote Yes Reflected Yes Credit rsanchezr Vulnerable 2kb amazon affiliates store WP plugin 2kb amazon affiliates store WP plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...
SUSE/Portus 2.2 Cross Site Scripting
Class Input Validation Error Remote Yes Stored Yes Credit rsanchezr Vulnerable SUSE/Portus 2.2 - https://github.com/SUSE/Portus Portus 2.2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
SUSE / Portus 2.2 Cross Site Scripting Vulnerability
SUSE/Portus version 2.2 suffers from a persistent cross site scripting vulnerability. Class Input Validation Error Remote Yes Stored Yes Credit rsanchezr Vulnerable SUSE/Portus 2.2 - https://github.com/SUSE/Portus Portus 2.2 is prone to a cross-site scripting vulnerability because it fails to...
Cybozu Garoon 3.0.0 - 4.2.5 Multiple XSS Vulnerabilities
Cybozu Garoon is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Foxit PhantomPDF Arbitrary Write RCE Vulnerability - Windows
Foxit PhantomPDF is prone to an arbitrary write vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)
A heap buffer overflow exists in IBM's Informix Dynamic Server and Informix Open Admin Tool. The vulnerability is due an input validation error when processing requests sent to index.php. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request...
Kodak InSite 8.0 Cross Site Scripting
========================================= Class Input Validation Error CVE Remote Yes Local No Credit rsanchezr Vulnerable Kodak InSite 6.5 to 8.0 Kodak InSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...