35 matches found
DRUPAL-CONTRIB-2023-016
The Iubenda Integration module provides a custom block to provide a link to the Iubenda privacy policy. On this block, a custom prefix and suffix text can be entered. The module does not sufficiently filter the block text fields on output, resulting in a Cross-Site Scripting XSS vulnerability. Th...
Iubenda Integration - Moderately critical - Cross Site Scripting - SA-CONTRIB-2023-016
The Iubenda Integration module provides a custom block to provide a link to the Iubenda privacy policy. On this block, a custom prefix and suffix text can be entered. The module does not sufficiently filter the block text fields on output, resulting in a Cross-Site Scripting XSS vulnerability. Th...
DRUPAL-CONTRIB-2022-044
Entity Browser Block provides a Block Plugin for every Entity Browser on your site. The module didn't sufficiently check entity view access in the block form. This vulnerability is mitigated by the fact that an attacker must be able to place a block - either through the core "Block Layout" page o...
WordPress Page Layout Builder Plugin < 2.0.0 Reflected XSS Vulnerability - Active Check
The WordPress Page Layout Builder Plugin is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Wordpress page-layout-builder plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . page-layout-builder is one of the page responsive plugin . A cross-site scripting vulnerability exists in version...
CVE-2016-1000141
Reflected XSS in wordpress plugin page-layout-builder v1.9.3...
CVE-2016-1000141
Reflected XSS in wordpress plugin page-layout-builder v1.9.3...
Cross site scripting
Reflected XSS in wordpress plugin page-layout-builder v1.9.3...
CVE-2016-1000141
Reflected XSS in wordpress plugin page-layout-builder v1.9.3...
CVE-2016-1000141
The WordPress Page Layout Builder Plugin (v1.9.3) contains a reflected cross-site scripting (XSS) vulnerability in the Page Layout Builder. The Nuclei/NVD data and WP vulnerability templates indicate the issue affects the plugin’s page-layout-builder component, with CVSS v3.0 base score 6.1 (vect...
WordPress Page Layout Builder Plugin <= 1.9.3 - Reflected XSS
This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...
Page Layout Builder 1.3.4 - includes/layout-settings.php layout_settings_id Parameter Reflected XSS
The page-layout-builder WordPress plugin was affected by an includes/layout-settings.php layoutsettingsid Parameter Reflected XSS security vulnerability...
WordPress Page Layout Builder Plugin <= 1.3.4 - Reflected XSS
This plugin is prone to a cross site scripting vulnerability in includes/layout-settings.php layoutsettingsid parameter. Solution Update the plugin...
WordPress Page Layout Builder Plugin <= 1.3.4 - Unspecified Issue
This plugin has an unspecified issue. Solution Update the plugin...
WordPress Page Layout Builder插件"layout_settings_id"跨站脚本漏洞
WordPress是一款内容管理系统。 由于传递到wp-content/plugins/page-layout-builder/includes/layout-settings.php中"layoutsettingsid" GET参数的输入在返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 WordPress Page Layout Builder Plugin 1.x 厂商补丁： WordPress ----- WordPress Page Layout Builder Plugin...