Design/Logic Flaw

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PYSEC-2019-89

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PT-2019-20170

Name of the Vulnerable Software and Affected Versions django-js-reverse versions prior to 0.9.1 Description The issue is related to a XSS vulnerability via the js reverse inline function. Recommendations For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue...

CVE-2019-15486: Improper Neutralization of Input During Web Page Generation

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PT-2019-14215

Name of the Vulnerable Software and Affected Versions django-js-reverse version 0.9.0 and earlier Description The issue is related to a security problem where an attacker can exploit the js reverse inline to perform a cross-site scripting XSS attack. Recommendations For django-js-reverse versions...

CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339: Unrestricted Upload of File with Dangerous Type

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

PT-2019-7299

Name of the Vulnerable Software and Affected Versions wp-file-upload plugin versions prior to 3.0.0 Description The issue is related to insufficient restrictions on file uploads, specifically affecting php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files. Recommendations For...

PT-2019-7298

Name of the Vulnerable Software and Affected Versions wp-file-upload plugin versions prior to 2.7.1 Description The issue is related to insufficient restrictions on the upload of .js files. Recommendations For versions prior to 2.7.1, update to version 2.7.1 or later to resolve the issue...

HTTP/2 DoS

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...

WordPress js-jobs plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. js-jobs is a recruitment/job search plugin used in it. WordPress js-jobs plugin has a cross-site request forgery vulnerability. Th...

CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

Cross site request forgery (csrf)

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974

CVE-2018-20974 affects the WordPress plugin js-jobs (JS Job Manager) prior to version 1.0.7. The root cause is CSRF due to insufficient verification of trusted-user requests, enabling forgery of cross-site actions. Impact details are limited to what is stated in the sources (CSRF with potential f...