CVE-2022-38086

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

CVE-2022-38086 WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

PT-2022-24194

Name of the Vulnerable Software and Affected Versions Shortcodes Ultimate plugin versions = 5.12.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows for changes to plugin preset settings. Recommendations For versions = 5.12.0, update to a version higher than...

CVE-2022-38086: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

WordPress plugin Shortcodes Ultimate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Shortcodes Ultimate < 5.12.1 - Settings Preset Update via CSRF

The plugin does not have CSRF check in place when updating its preset settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2021-4222

The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Cross site scripting

Cross-site scripting XSS vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings...

CVE-2013-4380

Cross-site scripting XSS vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings...

CVE-2013-4380

The MediaFront Drupal module is affected by an XSS vulnerability (CVE-2013-4380) in Drupal 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1. The issue arises from insufficient filtering of user input in the MediaFront preset settings, allowing remote authenticated users ...

CVE-2013-4380: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings...

PT-2014-2780

Name of the Vulnerable Software and Affected Versions MediaFront module versions 6.x-1.x before 6.x-1.6 MediaFront module versions 7.x-1.x before 7.x-1.6 MediaFront module versions 7.x-2.x before 7.x-2.1 Description A cross-site scripting XSS issue exists in the MediaFront module for Drupal,...