306 matches found
PT-2019-12305
Name of the Vulnerable Software and Affected Versions iCMS version 7.0.14 Description A cross-site scripting XSS issue was found in the idreamsoft iCMS software. The issue is related to the admincp.php?app=config tab parameter. Recommendations For iCMS version 7.0.14, consider restricting access ...
CVE-2018-17947
The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter...
CVE-2018-17947: Improper Neutralization of Input During Web Page Generation
The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter...
PT-2018-14291
Name of the Vulnerable Software and Affected Versions Snazzy Maps plugin versions prior to 1.1.5 Description The issue allows for XSS attacks via the text or tab parameter. Recommendations For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue...
CVE-2018-9034
Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...
CVE-2018-9034
Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...
CVE-2018-9034
CVE-2018-9034 affects the WordPress Relevanssi plugin, specifically version 4.0.4 (and possibly earlier). The vulnerability is a Reflected XSS in lib/interface.php where the GET parameter tab is read and echoed into HTML without proper escaping, allowing an attacker to inject arbitrary JavaScript...
CVE-2018-8767
joyplus-cms 1.6.0 has XSS in manager/adminajax.php?action=save&tab=prevodtype via the tname parameter...
WordPress PopCash.Net Code Integration Tool plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . PopCash.Net Code Integration Tool plugin is used in one of the code integration tool . A cross-site scripting...
CVE-2017-15810
The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...
CVE-2017-15810
The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...
CVE-2017-15810: Improper Neutralization of Input During Web Page Generation
The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...
PT-2017-14240
Name of the Vulnerable Software and Affected Versions PopCash.Net Code Integration Tool plugin version prior to 1.1 Description The issue allows for XSS via the tab parameter to "wp-admin/admin.php". Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue...
Piwigo Remote File Inclusion Vulnerability
Piwigo is a photo album script written in PHP. A security vulnerability exists in the admin/languages.php implementation in versions prior to Piwigo 2.8.3, where a remote administrator user passes the tab parameter and the executable file contains an attack...
CVE-2016-10085
admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter...
CVE-2016-10085
admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter...
CVE-2016-10085: Improper Access Control
admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter...
PT-2016-4574
Name of the Vulnerable Software and Affected Versions Piwigo versions through 2.8.3 Description The issue allows remote authenticated administrators to conduct File Inclusion attacks. This is achieved via the tab parameter in the "admin/languages.php" endpoint. Recommendations For versions throug...
