WordPress SEO by Yoast Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress SEO by Yoast is one of the search engine optimization plugins. A cross-site scripting vulnerability exist...

PT-2015-3538

Name of the Vulnerable Software and Affected Versions WordPress SEO by Yoast plugin versions prior to 2.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the post title parameter to "wp-admin/post-new.php". This is due to...

WordPress Social Hashtags Plugin <= 2.0.0 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in new post title field. Solution Update the plugin...

WordPress Editorial Calendar Plugin <= 2.6 - Cross Site Scripting

This plugin is prone to a post title XSS vulnerability. Solution Upgrade the plugin...

WordPress Social Hashtags Plugin <= 2.0.0 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in new post title field. Solution Update the plugin...

Editorial Calendar 2.6 - Post Title XSS

The Editorial Calendar WordPress plugin was affected by a Post Title XSS security vulnerability...

Wordpress 3.3.1 - Multiple CSRF Vulnerabilities

No description provided by source. +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivano Binetti...

Wordpress Plugin Maxgalleria Lite Wordpress Post Title Edit Vulnerbility

This material allows an attacker to change any post name while the wordpress is having the vulnerable plugin Usage Info Follow the POC Title : Wordpress Plugin Maxgalleria lite wordpress Post Title Edit Vulnerbility Author : Aloulou Date : 25/06/2014 Facebook : facebook.com/Aloulou.TN Email:...

vBulletin 4.1.12 Cross Site Scripting

TITLE ....... vBulletin 4.1.12 Reflected XSS try csrf for registered users DATE ........ 24.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1...

WordPress Core 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: [email protected]'"window.alertdocument.cookie Post Title is not sanitized and it's injectable with a...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

PT-2011-1798

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 2.01 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the post-title parameter in the "admin/changedata.php" endpoint...

CVE-2010-4863: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

DEBIAN-CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...