PT-2022-13305

Name of the Vulnerable Software and Affected Versions dTabs WordPress plugin versions prior to 1.4 Description The issue arises from the lack of proper sanitization and escaping of the tab parameter, which is then outputted back in an admin page. This leads to a Reflected Cross-Site Scripting...

PT-2022-13294

Name of the Vulnerable Software and Affected Versions Conference Scheduler WordPress plugin versions prior to 2.4.3 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the tab parameter is not properly sanitized and escaped before being outputted back i...

CVE-2022-0621: Improper Neutralization of Input During Web Page Generation

The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0600: Improper Neutralization of Input During Web Page Generation

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

Drupal Avatar Upload 7.x-1.0-beta8 Cross Site Scripting

Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Date: 2022-03-22 Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any po...

CVE-2022-25601

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

CVE-2022-25601: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

WordPress plugin Contact Form X跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Contact Form X plugin version 2.4 and earlier. The vulnerability stems from a la...

CVE-2022-0176

The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-13012

Name of the Vulnerable Software and Affected Versions PowerPack Lite for Beaver Builder WordPress plugin versions prior to 1.2.9.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the tab parameter is not properly sanitised and escaped before being...

CVE-2022-0176: Improper Neutralization of Input During Web Page Generation

The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress Jetpack 9.1 Plugin - Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting XSS Author: Milad karimi Software Link: https://wordpress.org/plugins/jetpack Version: 9.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Jetpack from any post types. The slider import search feature and tab...

WordPress Contact Form Builder 1.6.1 Plugin - Cross Site Scripting Vulnerability

Exploit Title: Wordpress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting XSS Author: Milad karimi Software Link: https://wordpress.org/plugins/contact-forms-builder/ Version: 1.6.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Contact Form Builder from any post...

WordPress Contact Form 7 Skins plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Contact Form 7 Skins plugin in version 2.5.0 and earlier has a cross-site scripting vulnerability that stems from the tab parameter not being escaped before being output to the admin...

CVE-2021-25077

The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting...

CVE-2021-25077: Improper Neutralization of Input During Web Page Generation

The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting...

PT-2022-9633

Name of the Vulnerable Software and Affected Versions The Store Toolkit for WooCommerce WordPress plugin versions prior to 2.3.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the tab parameter is not properly sanitised and escaped before being...

CVE-2021-25063

The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25063

The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25063: Improper Neutralization of Input During Web Page Generation

The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...