affiliate-toolkit – WordPress Affiliate Plugin < 3.4.4 - Reflected Cross-Site Scripting via keyword

Description The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the keyword parameter in versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for...

EventPrime < 3.2.0 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. POC 1 - Visit any of the following pages created by the plugin: - Event Organize...

EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website. Insert '"Clickme! on the keyword search field or directly on the link...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

Cross site scripting

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41538: Improper Neutralization of Input During Web Page Generation

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

CVE-2023-41537: Improper Neutralization of Input During Web Page Generation

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

PT-2023-27965 · Phpjabbers · Phpjabbers Php Forum Script

Name of the Vulnerable Software and Affected Versions: phpjabbers PHP Forum Script version 3.0 Description: The issue concerns a Cross Site Scripting XSS flaw via the keyword parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendation...

Business Directory Script Cross-site Scripting Vulnerabilities

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

Business Directory Script Cross-site Scripting Vulnerabilities

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

CVE-2023-36213

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

Sql injection

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

PT-2023-25484

Name of the Vulnerable Software and Affected Versions MotoCMS version 3.4.3 Description A SQL injection issue allows a remote attacker to gain privileges via the keyword parameter of the search function. This enables the attacker to potentially access or manipulate sensitive data. Recommendations...

MotoCMS SQL Injection Vulnerability

MotoCMS is a simple website builder from MotoCMS. MotoCMS version v3.4.3 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. The vulnerability can be exploited by an attacker to gain privileges via the keyword...