74 matches found
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2022-44468
Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
CVE-2022-42360
Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
CVE-2022-1047: Improper Neutralization of Input During Web Page Generation
The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability...
PT-2022-13617
Name of the Vulnerable Software and Affected Versions Themify Post Type Builder Search Addon WordPress plugin versions prior to 1.4.0 Description The issue arises from the plugin's failure to properly escape the current page URL before reusing it in an HTML attribute, leading to a reflected...
CVE-2022-28434
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2...
CVE-2022-25606
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl, &downloadcategories...
PT-2022-17400
Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered in the WP-DownloadManager WordPress plugin. The vulnerable parameters are download path,...
CVE-2022-25605
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered in WP-DownloadManager WordPress plugin versions = 1.68.6. Vvulnerable parameters &downloadpath, &downloadpathurl, &downloadpageurl...
PT-2022-17399
Name of the Vulnerable Software and Affected Versions WP-DownloadManager WordPress plugin versions = 1.68.6 Description Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered. The vulnerable parameters are download path, download path url, and download page url...
PT-2021-12679
Name of the Vulnerable Software and Affected Versions: AquaNPlayer version 2.0.0.92 Description: The issue is related to a directory traversing vulnerability in the download page URL. An attacker can use "dot dot" sequences ../../ to traverse directories and potentially view host files on the...
CVE-2020-2227
Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerability...
Ping Identity: Stored XSS in Application menu via Home Page Url
There is a stored XSS vulnerability in the Application List page for the Connections module in https://console-staging.pingone.com/ Steps To Reproduce: 1. Login to https://console-staging.pingone.com/ and navigate to Connections / Applications 2. Add a new Application. Pick Native App, pick a nam...
CVE-2014-4559
Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...
CVE-2014-4559
Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...
PT-2019-7118
Name of the Vulnerable Software and Affected Versions Swipe Checkout for WP e-Commerce plugin versions 3.1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the api key, payment page url, merchant id, api url, or currency parameter in the...
Cross site scripting
Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...
PT-2018-14270
Name of the Vulnerable Software and Affected Versions Circontrol CirCarLife versions prior to 4.3.1 Description The issue allows authentication to the device to be bypassed by entering the URL of a specific page. Recommendations For versions prior to 4.3.1, update to version 4.3.1 or later to...