CVE-2011-3860

Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2011-4733 · Unknown · Antisnews Theme

Name of the Vulnerable Software and Affected Versions: Antisnews theme versions prior to 1.10 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-4734 · Pixiv · Pixiv Custom Theme

Name of the Vulnerable Software and Affected Versions: Pixiv Custom theme versions prior to 2.1.6 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to...

PT-2011-4726 · WordPress · Atahualpa

Name of the Vulnerable Software and Affected Versions: Atahualpa theme versions prior to 3.6.8 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 3.6.8, update to version...

PT-2011-4739 · WordPress · Readline

Name of the Vulnerable Software and Affected Versions: RedLine theme versions prior to 1.66 for WordPress Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to 1.66...

PT-2011-4736 · Cover · Cover

Name of the Vulnerable Software and Affected Versions: Cover WP theme versions prior to 1.6.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-4730 · WordPress · Zenlite

Name of the Vulnerable Software and Affected Versions: ZenLite theme versions prior to 4.4 for WordPress Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable...

PT-2011-4731 · Unknown · F8 Lite Theme

Name of the Vulnerable Software and Affected Versions: F8 Lite theme versions prior to 4.2.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later...

PT-2011-4732 · Unknown · Elegant Grunge Theme

Name of the Vulnerable Software and Affected Versions: Elegant Grunge theme versions prior to 1.0.4 Description: The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...

CVE-2010-2040

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

DEBIAN-CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2008-5323

Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file...

Sql injection

SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2007-4165

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...

PT-2007-5361 · Xuyiyang · Blue Memories Theme

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...