PT-2011-4731 · Unknown · F8 Lite Theme

Name of the Vulnerable Software and Affected Versions: F8 Lite theme versions prior to 4.2.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later...

PT-2011-4732 · Unknown · Elegant Grunge Theme

Name of the Vulnerable Software and Affected Versions: Elegant Grunge theme versions prior to 1.0.4 Description: The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter...

CVE-2011-3863: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3860: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3855: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3858: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3854: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2011-4730 · WordPress · Zenlite

Name of the Vulnerable Software and Affected Versions: ZenLite theme versions prior to 4.4 for WordPress Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable...

CVE-2011-3852: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2009-4972: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php aka the log in page in SimpleID before 0.6.5 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2040

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-0691: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...

DEBIAN-CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...