EUVD-2018-21438

Malware in sbrugna...

PT-2021-16242

Name of the Vulnerable Software and Affected Versions: The Tutor LMS WordPress plugin versions prior to 1.9.9 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks due to the plugin not escaping some of its settings before outputting them in attributes, even...

CVE-2021-24687

The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2021-16196

Name of the Vulnerable Software and Affected Versions The Modern Events Calendar Lite WordPress plugin versions prior to 5.22.2 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the plugin not escaping some of its settings before outputting them in...

CVE-2018-9844

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS...

CVE-2018-9844

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS...

CVE-2018-9844

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS...

PT-2018-19068

Name of the Vulnerable Software and Affected Versions Iptanus WordPress File Upload plugin versions prior to 4.3.4 Description The issue is related to the mishandling of Settings attributes, which leads to a cross-site scripting XSS problem. Recommendations For versions prior to 4.3.4, update to...

CVE-2018-9844: Improper Neutralization of Input During Web Page Generation

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS...