Cross site scripting

Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...

CVE-2015-1436

Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...

CVE-2015-1436

The CVE refers to a Cross-Site Scripting (XSS) vulnerability in the WordPress Easing Slider plugin (versions up to 2.2.0.6) caused by insufficient sanitization of the HTTP GET parameter edit in admin.php when page is easingslider_manage_customizations or easingslider_edit_sliders. Impact: attacke...

CVE-2015-1436: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...

WordPress Easing Slider 2.2.0.6 Cross Site Scripting

Advisory ID: HTB23249 Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor Patch: January 22, 2015 Public...

Easing Slider <= 2.2.0.6 - 2 x Cross-Site Scripting (XSS)

The Easing Slider WordPress plugin was affected by a 2 x Cross-Site Scripting XSS security vulnerability...

WordPress Easing Slider 2.2.0.6 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor...

WordPress Plugin Easing Slider Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . WordPress Easing Slider Plugin is a wordpress-based plugin . WordPress Easing Slider Plugin has multiple cross-site scripting vulnerabilities that can...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

WordPress Revolution Slider Local File Disclosure Vulnerability

WordPress Revolution Slider plugin suffers from a local file disclosure vulnerability. Note that this finding houses site-specific data. + Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage:...

PrestaShop cross-site scripting vulnerability (CNVD-2015-00700)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the blocklayered-ajax.php script in the blocklayered...

WordPress Revolution Slider Local File Disclosure

Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage: https://wordpress.org/plugins/patch-for-revolution-slider/ + Tested on: windows 7 / firefox , kali linux / firefox + Vulnerable Files: /plugins/revolution-slider/ + Dork : "Index of"...

CVE-2015-1175

Cross-site scripting XSS vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layeredpriceslider parameter...

Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin

High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in Easing Slider WordPress plugin, which can be exploited against administrators of WordPress with the vulnerable plugin to perform Cross-Site Scripting attacks. Successful exploitation of the vulnerabilities may allow an...

SA-CONTRIB-2015-022 - nodeauthor - Cross Site Scripting (XSS) - Unsupported

This module displays node author information in a jQuery slider. The module doesn't sufficiently sanitize Profile2 fields in a provided block. This vulnerability is mitigated by the fact that an attacker must have a user account allowed to edit profile fields. CVE identifiers issued CVE-2015-3365...

Multiple Slider Plugins for WordPress 'img' Parameter Local File Inclusion Vulnerability

A Slider plugin for WordPress hosted on the remote web server is affected by a local file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'img' parameter of the 'imageview.class.php' script. This allows an unauthenticated, remote attacker to read arbitrary...

WordPress Slider Revolution Responsive File Upload

File upload vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Slider Revolution Responsive File Disclosure

File disclosure vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Social Slider Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Social Slider is a social sharing button display plugin. Social Slider plugin suffers from a SQL injection vulnerability that allows remo...