4139 matches found
americanconsumercouncil.org XSS vulnerability
Open Bug Bounty ID: OBB-609376 Description| Value ---|--- Affected Website:| americanconsumercouncil.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress User Profile&Membership Plugin Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports PHP and MySQL server set up a personal blog site.User Profile&Membership plugin is used in one of the website membership registration plugin. A cross-site request forger...
WordPress User Profile&Membership Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports PHP and MySQL server set up a personal blog site.User Profile&Membership plugin is used in one of the website membership registration plugin. A cross-site scripting...
CVE-2018-10233
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin...
CVE-2018-10234
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions§ion=account page...
CVE-2018-10233
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin...
CVE-2018-10234
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions§ion=account page...
Cross site request forgery (csrf)
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin...
Cross site scripting
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions§ion=account page...
CVE-2018-10233
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin...
CVE-2018-10234
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions§ion=account page...
CVE-2018-10233
CVE-2018-10233 affects the WordPress User Profile & Membership plugin (Ultimate Member) before 2.0.7. A CSRF flaw with no mitigations is present throughout the plugin, potentially allowing unauthorized operations. Affected component: the plugin’s core/profile/membership functions; root cause: lac...
CVE-2018-10234
CVE-2018-10234: Authenticated Cross-Site Scripting in the WordPress User Profile & Membership plugin prior to 2.0.11, exploitable via the Account Deletion Custom Text field on wp-admin/admin.php?page=um_options§ion=account. Impact is XSS authenticated users; remediation is to update to 2.0.11...
CVE-2018-10233: Cross-Site Request Forgery (CSRF)
The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a structural finding throughout the entire plugin...
CVE-2018-10234: Improper Neutralization of Input During Web Page Generation
Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions§ion=account page...
Microsoft Windows: Join Microsoft MAPS
This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. You can choose to send basic or additional information about...
PT-2018-9774
Name of the Vulnerable Software and Affected Versions: User Profile & Membership plugin versions prior to 2.0.11 Description: An issue exists in the User Profile & Membership plugin for WordPress, where authenticated cross-site scripting is possible. This is due to a vulnerability in the Account...
PT-2018-9773
Name of the Vulnerable Software and Affected Versions: User Profile & Membership plugin versions prior to 2.0.7 Description: The issue concerns the lack of mitigations against cross-site request forgery attacks in the plugin. This is a structural finding throughout the entire plugin, indicating a...
Stored Cross-Site Scripting Vulnerability in CLTPHP's "Membership Management in the Backend of the Website".
CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. A stored cross-site scripting vulnerability exists in the "Membership Management" section of CLTPHP. An attacker can insert malicious js code into the page to obtain user cookies and other...
PT-2018-8651
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions 3.x.x.E through 16.x Description: A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality could allow an unauthenticated, adjacent attacker to exhaust buffers on an affecte...