PT-2020-13019

Name of the Vulnerable Software and Affected Versions Catch Breadcrumb plugin versions prior to 1.5.4 Description The issue allows Reflected XSS via the s parameter, which is a search query. This affects not only the Catch Breadcrumb plugin but also 16 themes by the same author if the plugin is...

CVE-2020-12054: Improper Neutralization of Input During Web Page Generation

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter a search query. Also affected are 16 themes if the plugin is enabled by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise...

CVE-2015-6591

Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter...

CVE-2015-6591: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter...

PT-2020-7875

Name of the Vulnerable Software and Affected Versions: Free Reprintables ArticleFR versions 3.0.7 and earlier Description: The issue allows local users to read arbitrary files via the s parameter in the application/templates/amelia/loadjs.php file. Recommendations: For versions 3.0.7 and earlier,...

CVE-2015-9504

The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter...

CVE-2015-9504

The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter...

CVE-2015-9504

The CVE-2015-9504 entry describes an XSS vulnerability in the WordPress WeeklyNews theme prior to version 2.2.9, exploitable via the s parameter. Affected component/file: the weeklynews WordPress theme (pre-2.2.9). Root cause: reflected XSS through the s query parameter, allowing an attacker to i...

CVE-2015-9504: Improper Neutralization of Input During Web Page Generation

The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter...

PT-2019-7463

Name of the Vulnerable Software and Affected Versions weeklynews theme versions prior to 2.2.9 for WordPress Description The issue concerns a Cross-Site Scripting XSS vulnerability. It occurs via the s parameter. Recommendations For versions prior to 2.2.9, update to version 2.2.9 or later to...

CVE-2019-17115

Multiple cross-site scripting XSS vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is visited. The renderedmessage column is retrieved and displayed, unsanitized, on Logs.jsp. A remote...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is visited. The renderedmessage column is retrieved and displayed, unsanitized, on Logs.jsp. A remote...

S-CMS enterprise website builder system aj***.php page G_s*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system aj.php page Gs parameters exist SQL injection vulnerability, attackers can use the...

CVE-2016-10999

The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter...

CVE-2016-10999: Improper Neutralization of Input During Web Page Generation

The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter...

PT-2019-7792

Name of the Vulnerable Software and Affected Versions Goodnews theme versions through 2016-02-28 Description The issue allows for XSS via the s parameter. Recommendations For Goodnews theme versions through 2016-02-28, update to a version released after 2016-02-28 to resolve the issue...

CVE-2016-10994

The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter...

CVE-2016-10994

The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter...

CVE-2016-10994

The CVE-2016-10994 entry concerns the Truemag theme (WordPress) 2016 Q2 and reports an XSS vulnerability via the s parameter. Multiple connected sources corroborate an unauthenticated reflected XSS affecting the Truemag WordPress theme, with PoC examples showing input like s="> that can be ref...