3154 matches found
WordPress SEO Rank Reporter Plugin <= 2.2.2 - Cross Site Scripting (XSS)
Because of this vulnerability, authenticated administrators can inject html or JS code. Vulnerable parameters are "keyworditem" and "entryurl". Solution Update the plugin...
SEO Rank Reporter <= 2.2.2 - Authenticated Reflected Cross-Site Scripting (XSS)
The seo-rank-reporter WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
internetofficer.com XSS vulnerability
Vulnerable URL: http://www.internetofficer.com/seo-tool/redirect-check/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69216 Google Pagerank| 2 VIP website status:| No Check...
seo-stalker.ru Open Redirect vulnerability
Vulnerable URL: http://www.seo-stalker.ru/rl.php?url=xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...
tpu.ro XSS vulnerability
Vulnerable URL: http://www.tpu.ro/cauta/?keyword=%27%29;alert%28/XSSPOSED/%29//=search= Details: Description| Value ---|--- Patched:| Yes, at 22.11.2015 Latest check for patch:| 22.11.2015 22:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27505 Google...
seo.studup.info Open Redirect vulnerability
Vulnerable URL: http://seo.studup.info/redirect.php?url=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...
WordPress Yoast SEO 1.7.3.3 SQL Injection
SQL Injection vulnerability in WordPress Yoast SEO plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress All in One SEO Pack Plugin <= 2.2.6.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...
WordPress SEO Redirection Plugin <= 2.8 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)
The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...
SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection
Plugin is still affected and has been closed...
WordPress Greg's High Performance SEO Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Greg's High Performance SEO plugin due to the program failing to properly filter user-supplied input. A...
Popular WordPress SEO Plugin Fixes XSS Bug
The Yoast WordPress SEO plugin, which has been downloaded more than 14 million times, has a serious cross-site scripting vulnerability that can allow an attacker to force a vulnerable site to execute arbitrary HTML code. The bug may have been reported to the plugin’s developer as long as two year...
WordPress Yoast 2.1.1 Cross Site Scripting
============================================================ Info ============================================================ Affects: Yoast Wordpress SEO Plugin ============================================================ Vulnerable Code =================================...
Yoast SEO <= 2.1.1 - Authenticated Stored DOM XSS
The "snippet preview" functionality of the Yoast WordPress SEO plugin was susceptible to cross-site scripting in versions before 2.2. PoC Vulnerable URL: /wp-admin/post-new.php?posttitle= Vulnerable Code wordpress-seo/js/wp-seo-metabox.js: function ystcleanstr if str == '' || str == undefined...
Yoast SEO <= 2.1.1 - Authenticated Stored DOM XSS
The "snippet preview" functionality of the Yoast WordPress SEO plugin was susceptible to cross-site scripting in versions before 2.2. Vulnerable URL: /wp-admin/post-new.php?posttitle= Vulnerable Code wordpress-seo/js/wp-seo-metabox.js: function ystcleanstr if str == '' || str == undefined return...
CVE-2015-2250
Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...
WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation
This plugin is prone to an unspecified privilege escalation vulnerability. Solution Update the plugin...
WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...