CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0603

The CVE-2018-0603 entry affects the WordPress plugin Site Reviews (Gemini Labs) prior to version 2.15.3. The vulnerability is a stored cross-site scripting (CWE-79) that can allow a remote attacker to cause arbitrary script execution in a logged-in user’s browser via unspecified vectors. Impact i...

CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0603: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Totally Pwning the Tapplock Smart Lock

TL;DR – How to open a Tapplock over BLE in under two seconds: Totally Pwning the Tapplock Smart Lock A couple of weekends ago, a YouTuber called JerryRigEverything posted a teardown of a “smart” padlock, called the Tapplock. He discovered that, using a sticky GoPro mount, he could remove the back...

WordPress plugin "Site Reviews" vulnerable to cross-site scripting

Overview The WordPress plugin "Site Reviews" provided by Gemini Labs contains a stored cross-site scripting vulnerability CWE-79. Keita Uchida of TDU Cryptography Lab reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

WordPress Site Reviews Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site. Site Reviews is used in one of the site reviews plugin. A cross-site scripting vulnerability exists in WordPress Site...

JVN#60978548: WordPress plugin "Site Reviews" vulnerable to cross-site scripting

The WordPress plugin "Site Reviews" provided by Gemini Labs contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the develope...

verified-reviews.com XSS vulnerability

Open Bug Bounty ID: OBB-622457 Description| Value ---|--- Affected Website:| verified-reviews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploring the virtual worlds of advergaming

Games and analytics services ran into one another headfirst recently, in a spat related to the game Conan Exiles. Developers had to remove a tracking service, which allowed game developers to track where Steam players had come from. By generating an API key and integrating it into the game,...

reviews.weddingbee.com XSS vulnerability

Open Bug Bounty ID: OBB-607790 Description| Value ---|--- Affected Website:| reviews.weddingbee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tintenalarm.de XSS vulnerability

Open Bug Bounty ID: OBB-606541 Description| Value ---|--- Affected Website:| tintenalarm.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

A Sobering Look at Fake Online Reviews

In 2016, KrebsOnSecurity exposed a network of phony Web sites and fake online reviews that funneled those seeking help for drug and alcohol addiction toward rehab centers that were secretly affiliated with the Church of Scientology. Not long after the story ran, that network of bogus reviews...

Facebook Cracks Down On Data Misuse With Expanded Bug Bounty Program

Facebook said in the coming weeks it will expand its bug bounty program in an attempt to crackdown on data misuse by third-party app developers. The company’s bug bounty program, first started in 2011, prompts researchers to find vulnerabilities on the social media platform – but now will be...

Cross site scripting

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

CVE-2018-7894 affects Eramba e1.0.6.033, with a Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter. The issue is documented across multiple sources (NVD entry for CVE-2018-7894 and related Red Hat/CNVD records) and is described as: an XSS vulnerability cau...

CVE-2018-7894: Improper Neutralization of Input During Web Page Generation

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

numbingcreamreviews.com XSS vulnerability

Open Bug Bounty ID: OBB-568763 Description| Value ---|--- Affected Website:| numbingcreamreviews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...