PT-2015-6228

Name of the Vulnerable Software and Affected Versions Plupload versions 2.1.2 WordPress versions 3.9.x through 4.1.1 Description A cross-site scripting XSS issue allows remote attackers to execute same-origin JavaScript functions via the target parameter. This can be demonstrated by executing a...

WordPress <= 4.1.1 - XSS

Because of this vulnerability, an attacker can execute same-origin JavaScript functions via the "target" parameter, as demonstrated by executing a certain click function, related to init.as and fireEvent.as. Solution Update WordPress...

CVE-2015-2315: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminderpopup action to the default URI...

PT-2015-5708

Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminder popup action to the default URI. This could potentially lead...

CVE-2013-3064: Undefined Security Weakness

Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...

PT-2014-2647

Name of the Vulnerable Software and Affected Versions Linksys EA6500 version 1.1.28.147876 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter. This is related to an open redirect vulnerability in th...

CVE-2012-2129

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

DEBIAN-CVE-2012-2129

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

UBUNTU-CVE-2012-2129

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

CVE-2012-2129

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

PT-2012-3825 · Dokuwiki · Dokuwiki

Name of the Vulnerable Software and Affected Versions: DokuWiki version 2012-01-25 Angua Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action. Recommendations: For DokuWiki version...

CVE-2012-2129: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

CVE-2012-1212: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMWInitialize.php in Semantic Enterprise Wiki SMW+ 1.5.6, 1.6.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to...

PT-2012-3135

Name of the Vulnerable Software and Affected Versions Semantic Enterprise Wiki SMW+ versions 1.5.6, 1.6.0 2 and earlier Description The issue is related to a cross-site scripting XSS vulnerability in the smwfOnSfSetTargetName function. This vulnerability allows remote attackers to inject arbitrar...

CVE-2011-0526

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

CVE-2011-0526

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

PT-2011-2422

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a "/entry/signin" action. This could potentially lead to unauthoriz...

CVE-2011-0526: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

CVE-2011-0908: Improper Input Validation

Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526...

PT-2011-2751

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.6 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter. This can be exploited to trick users into revealin...