SUSE-SU-2016:2510-1 Security update for squidGuard

squidGuard was updated to fix one security issue. This security issue was fixed: - CVE-2015-8936: Reflected cross site scripting vulnerability because of insufficient escaping bsc985612...

CVE-2016-1000149

Reflected XSS in wordpress plugin simpel-reserveren v3.5.2...

CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

BigTree-CMS 4.2.x < 4.2.4 Multiple Vulnerabilities

Binary data 9555.prm...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce. PoC...

WordPress Form Builder Plugin <= 1.05 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...

K2 Joomla! Extension Cross Site Scripting

================================================================ K2 Joomla! Extension PoC: http://localhost/administrator/index.php?option=comk2&view=categori...

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress plugin Vospari Forms <= 1.3 - Reflected Cross-Site Scripting (XSS) vulnerability

WordPress plugin Vospari Forms version 1.3 vulnerable to Reflected Cross-Site Scripting XSS. Altering the URL would allow for the XSS to be executed for further exploitation. Solution Update plugin to the latest version at least version 1.4...

Woo Email Control <= 1.01 - Reflected Cross-Site Scripting (XSS) & CSRF

Due to a lack of encoding and CSRF mitigation in the testemail function found on line 106 of classes/class-wooctrl.php, it is possible to automate a request to the AJAX handler for the wooctrlsendtestemail action which will reflect the specified script back to the end user...

WordPress Woo Email Control Plugin <= 1.01 - Multiple Vulnerabilities

This plugin is prone to a reflected cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Email Users Plugin <= 4.8.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Email Users <= 4.8.2 - Reflected Cross-Site Scripting (XSS)

The Email Users WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Profile Builder < 2.4.2 - Reflected Cross-Site Scripting (XSS)

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WSO2 SOA Enablement Server Cross Site Scripting

Title: WSO2 SOA Enablement Server - Reflected Cross Site Scripting Authors: Pawel Gocyla Date: 08. June 2016 Affected Software: ================== WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 Probably other versions are also vulnerable. Vulnerability: Reflected Cross Site...

OLX: Reflected Cross Site scripting Attack (XSS)

Hi Team, Vulnerable URL :- https://olx.qa/en/account/confirm/?email=&hash=26d7e919ff37300d2f363c9066dd5b9d&ts=14682640390036aalert1261db&p=0674cd7dFl22cq3mM5jZfwjNxZ7slA==&vk=0&utmsource=test&utmmedium=email&utmcampaign=link XSS will be trigger. Well as you guys mentioned in the report 150735 tha...

MGASA-2016-0237 Updated squidguard packages fix security vulnerability

The squidGuard.cgi program is vulnerable to a reflected cross site scripting vulnerability in the blocking script squidGuard.cgi. The vulnerability is triggered when a user clicks a link to a blocked site where the url has scripting instructions added CVE-2015-8936. In Mageia's squidguard package...

Adobe ColdFusion Security Update (APSB16-22)

Adobe ColdFusion is prone to a reflected cross site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...