13 matches found
Podcast Channels < 0.28 - Cross-Site Scripting
The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. id: CVE-2014-4544 info: name: Podcast Channels 0.28 - Cross-Site Scripting author: daffainfo severity: medium description: The Podcast Channels WordPress plugin was...
Podcast Channels < 0.28 - Cross-Site Scripting Detection
The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting securi.""" from...
EUVD-2014-4471
Malware in sbrugna...
WordPress Podcast Channels Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Podcast Channels is a plugin for building podcast sites. A cross-site scripting vulnerability exists in WordPress Podcast Channels 0.20...
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
CVE-2014-4544
Podcast Channels WordPress plugin ≤0.20 is affected by an unauthenticated reflected XSS via the Filename parameter to getid3/demos/demo.write.php. The vulnerability allows execution of arbitrary script in the victim’s browser, with potential session-related impacts. Affected versions are 0.20 and...
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
PT-2019-7114
Name of the Vulnerable Software and Affected Versions Podcast Channels plugin versions 0.20 and earlier for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to "getid3/demos/demo.write.php" API endpoint. This is a cross-site...
CVE-2014-4544: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
Podcast Channels < 0.28 - Unauthenticated Reflected XSS
The Podcast Channels WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability. PoC http://127.0.0.1/wp-content/plugins/podcast–channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&...
Podcast Channels < 0.28 - Unauthenticated Reflected XSS
The Podcast Channels WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability. http://127.0.0.1/wp-content/plugins/podcast–channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&...