CVE-2021-24323

When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfilteredhtml is disabled...

Cross site scripting

When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfilteredhtml is disabled...

CVE-2021-24323

CVE-2021-24323 affects the WordPress WooCommerce plugin (vulnerable when taxes are enabled). The issue arises from the Additional tax classes field being not properly sanitised/escaped before output in the admin dashboard, enabling an authenticated admin to inject XSSayloads. The vulnerability ap...

Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)

When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfilteredhtml is disabled PoC Enable taxes...

WordPress iThemes Exchange Easy US Sales Taxes Add-on Plugin Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. easy US Sales Taxes Add-on is one of the sales tax calculation plugins. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Easy US Sales Taxes Add-...

CVE-2015-9369

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9367

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9369

CVE-2015-9369 affects the WordPress plugin Easy US Sales Taxes Add-on for iThemes Exchange (before 1.1.0). The vulnerability is an XSS flaw triggered via the functions add_query_arg() and remove_query_arg(), enabling attacker-controlled client-side code execution in affected contexts. The root ca...

CVE-2015-9368

Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9368

CVE-2015-9368 affects the Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange on WordPress, prior to version 1.2.0. The vulnerability is an XSS due to improper handling of add_query_arg() and remove_query_arg(), allowing injected scripts via URL parameters. Impact is XSS; exploitation det...

CVE-2015-9367

The CVE-2015-9367 entry concerns the WordPress ecosystem: the Easy Canadian Sales Taxes Add-on for iThemes Exchange is vulnerable to cross‑site scripting (XSS) through add_query_arg()/remove_query_arg() in versions before 1.1.0. The underlying issue is improper handling of query parameters that c...

kbflive-2.kiplinger.com XSS vulnerability

Open Bug Bounty ID: OBB-553353 Description| Value ---|--- Affected Website:| kbflive-2.kiplinger.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webmail.keralataxes.gov.in XSS vulnerability

Vulnerable URL: http://webmail.keralataxes.gov.in/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

My VAT Calculator: easy taxes - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application My VAT Calculator: easy taxes published at the 'play' market has multiple vulnerabilities...

e-taxes.gov.az XSS vulnerability

Vulnerable URL: https://www.e-taxes.gov.az/rolik/video.jsp?video=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.01.2016 Latest check for patch:| 25.01.2016 15:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Threat Outbreak Alert RuleID16464: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 39758 First Published: 2015 July 7 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16464 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID11012: Email Messages Distributing Malicious Software on August 7, 2014

Medium Alert ID: 35223 First Published: 2014 August 9 02:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11012 may contain the following files: Name | Si...

ASTPP VoIP Billing (4cf207a) Multiple Vulnerabilities

No description provided by source. Title: ====== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=687 VL-ID: ===== 687 Common Vulnerability Scoring System: ==================================...

ASTPP VoIP Billing (4cf207a) Cross Site Scripting

Title: ====== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=687 VL-ID: ===== 687 Common Vulnerability Scoring System: ==================================== 4 Introduction: =============...