Reflected Cross-site Scripting Vulnerability in Flash cms \module\other\member\data.asp Page

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A reflective cross-site scripting vulnerability exists in the Flash cms \module\other\member\data.asp page. Allows an attacker to construct XSS statements to perform pop-up box operations and obtain...

Win + G Pop Up Citrix Receiver Launching Apps/Desktops

When launching published apps or desktops from a Windows 10 OS a green popup windows briefly appears prompting to press Win + G for the game bar or for the search bar...

Reflective Cross-Site Scripting Vulnerability in Coremail Mail System

Coremail mail system is a large-scale enterprise mail system independently researched and developed by Yingshi Company, with mature system technology, stable and efficient performance, which can give full play to the performance of mail server. Reflection type cross-site scripting vulnerability...

Cross site scripting

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

CVE-2017-2284 affects the WordPress Popup Maker plugin. A cross-site scripting vulnerability exists in Popup Maker prior to version 1.6.5. The public details describe a reflected/unspecified-XSS risk that could allow injection of arbitrary scripts in pages processed by the plugin, potentially aff...

WordPress Popup Maker Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Popup Maker is one of the ads popup plugin. A cross-site scripting vulnerability exists in WordPress Popup Maker...

WordPress Popup Maker plugin <=1.6.4 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability in WordPress Popup Maker plugin 1.6.4 and earlier versions allows an attacker to inject arbitrary web script or HTML. Solution Update WordPress Popup Maker plugin to the latest available version at least 1.6.5...

Popup Maker <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)

The Popup Maker – Popup Forms, Opt-ins & More WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

JVN#92921024: WordPress plugin "Popup Maker" vulnerable to cross-site scripting

The WordPress plugin "Popup Maker" provided by Popup Maker contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the...

thefilmlot.com XSS vulnerability

Vulnerable URL: http://thefilmlot.com/tflblogwp/wp-content/plugins/popup-images/popup.php?z=http://thefilmlot.com/tflblogwp/blogimages/Biff07/drunkpubbig.jpg=504=706=%22/%3E%3CsvG/OnLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017...

abc.se XSS vulnerability

Vulnerable URL: https://www.abc.se/kansli/wordpress/wp-content/plugins/popup-images/popup.php/popup.php?z=http://www.abc.se/kansli/wordpress/wp-content/uploads/2007/10/svenwickberg.jpg=269=363=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at...

XSS Vulnerability in HYBBS 1.5.34 CMS

HYBBS is based on HYPHP framework, the framework is a MVC structure program. XSS vulnerability exists in HYBBS 1.5.34 CMS. An attacker can use this vulnerability to implant cross-site code, obtain sensitive information such as user cookies, close cross-site pop-up boxes, and also obtain page path...

media.lifeway.com XSS vulnerability

Vulnerable URL: http://media.lifeway.com/wmedia/lifeway/popup.asp?page=syscheck.asp=420=640=1"...

suap.comune.pv.it XSS vulnerability

Vulnerable URL: http://suap.comune.pv.it/popUp.asp?gSoftware=IstatComuni=G388IncludePage=popupcentro.asp=1"...

hvacsavesoftware.com XSS vulnerability

Vulnerable URL: http://www.hvacsavesoftware.com/popupcalendar.asp?when=201608=1/-///'/"//--...

recipes.sparkpeople.com XSS vulnerability

Vulnerable URL:...

Privacy Issue Fixed in Yopify Ecommerce Notification Plugin

A plugin used by a number of popular ecommerce platforms has an over-sharing problem. Yopify, which provides popup notifications about the last 50 purchases made on a site for Shopify, BigCommerce and other platforms, leaks a significant amount of customers’ personal information to a determined...