EUVD-2020-7360

Malware in sbrugna...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

WordPress Theme Nexos Real Estate SQL Injection

SQL Injection vulnerability in Theme Nexos Real Estate searchorder parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Nexos theme SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. WordPress Nexos theme has a SQL injection vulnerability. The...

WordPress Nexos theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress Nexos...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

Cross site scripting

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

Sql injection

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15363

The Nexos Real Estate WordPress theme (v1.7) is affected by SQL Injection via the search_order parameter in top-map/ side-map queries. Descriptions and multiple sources (DSquare E-712, Exploit-DB/PacketStorm references) confirm an unauthenticated SQLi vulnerability associated with Nexos Real Esta...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15364

The CVE-2020-15364 entry corresponds to the Nexos Real Estate WordPress Theme (up to v1.7). Connected sources confirm concrete details: vulnerable components are the frontend endpoints top-map/?search_location= (reflected XSS) and side-map/?search_order= (SQL Injection). Attacker could trigger un...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

Nexos - Real Estate < 1.8 - Unauthenticated Reflected XSS & SQL Injection

Unauthenticated Reflected XSS and SQL Injection vulnerabilities were discovered in the «Nexos - Real Estate WordPress Theme», tested version — v1.7. June 17th, 2020 - Confirmed & Escalated to Envato. June 19th, 2020 - v1.8 released. Fixing the issues. PoC PoC Unauthenticated Reflected XSS:...

CVE-2020-15364: Improper Neutralization of Input During Web Page Generation

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

CVE-2020-15363: Improper Neutralization of Special Elements used in an SQL Command

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

WordPress Nexos premium theme <= 1.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...

WordPress Nexos premium theme <= 1.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...