299 matches found
PT-2021-10161
Name of the Vulnerable Software and Affected Versions: ED01-CMS version 1.0 Description: The issue is a reflective cross-site scripting XSS vulnerability in the sposts.php component. This allows attackers to execute arbitrary web scripts or HTML by inserting a crafted payload into the Post title ...
Responsive Image Slider, Photo Gallery And Carousel < 1.3.6 - Subscriber+ Arbitrary Post Access
The plugin does not have proper authorisation check in the sfimageid AJAX action, which could allow any authenticated, such as subscriber, to view the content and title of arbitrary posts, for example private, draft and password protected ones. POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: /...
PT-2021-21381
Name of the Vulnerable Software and Affected Versions WordPress Media File Renamer – Auto & Manual Rename plugin versions = 5.1.9 Description A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized changes to uploaded media. The affected parameters are post title,...
PT-2021-16151 · WordPress · Visual Link Preview
Name of the Vulnerable Software and Affected Versions: Visual Link Preview WordPress plugin versions prior to 2.2.3 Description: The issue allows any authenticated user to call several AJAX actions without proper authorization, due to the CSRF nonce being displayed for all authenticated users. Th...
CVE-2021-38326
The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
CVE-2021-38326
The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
CVE-2021-38326 Post Title Counter <= 1.1 Reflected Cross-Site Scripting
The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
CVE-2021-38326
The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
CVE-2021-38326
CVE-2021-38326 concerns the WordPress Post Title Counter plugin. According to the provided sources, the vulnerability is a Reflected Cross-Site Scripting (XSS) flaw via the notice parameter in the ~/post-title-counter.php file, affecting versions up to and including 1.1. The core issue is lack of...
CVE-2021-38326: Improper Neutralization of Input During Web Page Generation
The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...
PT-2021-22044
Name of the Vulnerable Software and Affected Versions: Post Title Counter WordPress plugin versions up to and including 1.1 Description: The issue allows attackers to inject arbitrary web scripts via the notice parameter found in the /post-title-counter.php file, enabling Reflected Cross-Site...
Post Title Counter <= 1.1 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts...
WordPress Post Title Counter plugin <= 1.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Post Title Counter plugin versions = 1.1. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...
PT-2021-20096
Name of the Vulnerable Software and Affected Versions Ovation Dynamic Content version 1.10.1 for Elementor Description The issue allows for XSS via the post title parameter. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
CVE-2020-35752
Baby Care System 1.0 is affected by a cross-site scripting XSS vulnerability in the Edit Page tab through the Post title parameter...
