MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting

MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting Exploit Title: MyBB Threads to Link Plugin v1.3 - Persistent XSS Date: 3/15/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=1065 Version: v1.3...

CVE-2017-1000088

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...

CVE-2017-1000088

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...

Input validation

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...

CVE-2017-1000088

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...

CVE-2017-1000088

The CVE concerns Jenkins Sidebar Link Plugin. The root cause is lack of input validation for sidebar entries configured by users, enabling javascript: schemes to be used in links. This leads to cross-site scripting (XSS) in affected Jenkins objects. Connected advisories (GHSA and CNVD variants) c...

WordPress Keyword Link Plugin <= 1.7 - CrossSite Scripting (XSS)

Because of this vulnerability, authenticated administrators can store HTML or JS code via "limit" parameter. Solution Update the plugin...

WordPress Keyword Link Plugin <= 1.7 - CrossSite Scripting (XSS)

Because of this vulnerability, authenticated administrators can store HTML or JS code via "limit" parameter. Solution Update the plugin...

WordPress Pretty Link Plugin 1.4.56 - Multiple Cross Site Scripting Vulnerabilities

WordPress Pretty Link plugin is prone to multiple cross-site scripting vulnerabilities that fail to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...