Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Nextend Smart Slider 3.This issue affects Smart Slider 3: from n/a through 3.5.1.9...

CVE-2022-45845

The CVE-2022-45845 entry concerns the WordPress Smart Slider 3 plugin (versions

CVE-2022-45845: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Nextend Smart Slider 3.This issue affects Smart Slider 3: from n/a through 3.5.1.9...

PT-2024-11723 · Nextend · Nextend Smart Slider 3

Name of the Vulnerable Software and Affected Versions: Nextend Smart Slider 3 versions 3.5.1.9 and earlier Description: The issue is related to the deserialization of untrusted data. There is no information provided about the estimated number of potentially affected devices worldwide or real-worl...

CVE-2022-45843

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...

CVE-2022-45843

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...

CVE-2022-45843 WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...

CVE-2022-45843

CVE-2022-45843 describes an authenticated stored XSS in the WordPress plugin WordPress Smart Slider 3 (Nextend Smart Slider 3)

PT-2023-14780

Name of the Vulnerable Software and Affected Versions Nextend Smart Slider 3 plugin versions = 3.5.1.9 Description The issue is related to a Stored Cross-Site Scripting vulnerability that affects the Nextend Smart Slider 3 plugin. This vulnerability requires authentication and is limited to users...

CVE-2022-45843: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Nextend Smart Slider 3 plugin = 3.5.1.9 versions...

Cross site scripting

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

CVE-2015-4557

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

CVE-2015-4557

CVE-2015-4557 is an XSS vulnerability in the Nextend Twitter Connect WordPress plugin, present before version 1.5.2. The issue is triggered via the redirect_to parameter in the function new_Twitter_sign_button in nextend-Twitter-connect.php, allowing injection of arbitrary script/HTML. The relate...

CVE-2015-4557

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

CVE-2015-4557

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

PT-2018-4380

Name of the Vulnerable Software and Affected Versions Nextend Twitter Connect plugin versions prior to 1.5.2 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the new Twitter sign button function in the nextend-Twitter-connect.php file. The vulnerability...

CVE-2015-4557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

Nextend Facebook Connect <= 1.5.7 - Cross-Site Request Forgery (CSRF)

The Nextend Social Login and Register WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability. PoC...

WordPress Plugin Nextend Facebook Connect 'new_fb_sign_button' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Nextend Facebook Connect is one of the Facebook login and registration plug-ins. A cross-site scripting vulnerability exist...