CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

Cross site scripting

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

CVE-2017-18527

CVE-2017-18527 affects the WordPress Pagination plugin by BestWebSoft (versions

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

Kanboard < 1.2.8 XSS Vulnerability

Kanboard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kanboard:kanboard"...

Code injection

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

CVE-2019-7324 affects Kanboard (pre-1.2.8). The issue is an XSS in the pagination sorting logic within app/Core/Paginator.php. Public data from multiple sources confirms the vulnerability exists in Kanboard up to version 1.2.7 and was addressed in Kanboard 1.2.8 with a release/commit cited in ref...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

Cross-site Scripting (XSS) Through Generated Pagination Links

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

FreeBSD : Serendipity -- multiple vulnerabilities (01018916-c47c-11e8-8b07-00e04c1ea73d)

Serendipity reports : Security: Fix XSS for pagination, when multi-category selection is used. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistributi...

Serendipity -- multiple vulnerabilities

Serendipity reports: Security: Fix XSS for pagination, when multi-category selection is used...

Hanno's projects: Reflected xss in Serendipity's /index.php

Summary: There exists a reflected xss threat in https://blog.fuzzing-project.org/index.php?frontpage. Description: By setting the serendipity%5bmultiCat%5d%5b%5d POST input to 1'"&%prompt1 I'm able to trigger a JavaScript prompt box in versions of IE up to and including IE 11. Steps To Reproduce:...

WordPress Pie Register Plugin < 3.0.9 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title: WordPress Plugin Pie Register order = escsql $order ; IV. PROOF OF CONCEPT The following URL have been confirmed to all suffer from Time Based SQL Injection. GET...

WordPress Ajax Pagination (twitter Style) plugin path traversal vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers set up a personal blog site . Ajax Pagination twitter Style plugin is used in one of the paging plugin . A path traversal vulnerability exist...

CVE-2014-2674

Directory traversal vulnerability in the Ajax Pagination twitter Style plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the loop parameter in an ajaxnavigation action to wp-admin/admin-ajax.php...

CVE-2014-2674

CVE-2014-2674 affects the WordPress Ajax Pagination (twitter Style) plugin, version 1.1. A path traversal/local file inclusion vulnerability exists in the plugin’s ajax_navigation action, allowing remote attackers to read arbitrary files by injecting ".." into the loop parameter sent to wp-admin/...

CVE-2014-2674

Directory traversal vulnerability in the Ajax Pagination twitter Style plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the loop parameter in an ajaxnavigation action to wp-admin/admin-ajax.php...