CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...

ScoreMe Theme - Cross-Site Scripting Detection

WordPress ScoreMe theme through 2016-04-01 contains a reflected cross-site scripting vulnerability via the s parameter which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

EUVD-2016-1984

Malware in sbrugna...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

WordPress ScoreMe theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ScoreMe theme is a theme plugin used to build sites with user ratings. A cross-site scripting vulnerability exists in WordPress ScoreMe...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

CVE-2016-10993 affects the WordPress ScoreMe theme (through 2016-04-01). The connected document provides concrete details: a reflected cross-site scripting (XSS) vulnerability via the s parameter, enabling an attacker to run arbitrary JavaScript in the victim’s browser. This can lead to session c...

CVE-2016-10993: Improper Neutralization of Input During Web Page Generation

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

PT-2019-7786

Name of the Vulnerable Software and Affected Versions ScoreMe theme versions prior to 2016-04-01 Description The issue allows for XSS via the s parameter. Recommendations For ScoreMe theme versions prior to 2016-04-01, update to a version released after 2016-04-01 to resolve the issue...

Wordpress Scoreme Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site.ScoreMe is a plugin for WordPress. A cross-site scripting vulnerability exists in Wordpress Scoreme Theme. A...

Wordpress Scoreme主题跨站漏洞

No description provided by source...

WordPress ScoreMe Theme - Cross Site Scripting

Because of this vulnerability in the "s" value of the "index.php" file, remote attackers are able to inject own malicious script codes to the client-side of the affected web-application. Solution Update the theme...

ScoreMe Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)

The scoreme WordPress theme was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Scoreme Theme Cross Site Scripting

Document Title: =============== Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID:...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...