WordPress E-goi Smart Marketing SMS and Newsletters Forms Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.E-goi Smart Marketing SMS and Newsletters Forms plugin is one of the plugins used in the support of customizable forms...

WordPress ILLID Share This Image plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.ILLID Share This Image plugin is used to add a social sharing icon plugin. A cross-site scripting vulnerability...

Design/Logic Flaw

By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login fo...

CVE-2017-1000484

By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to the Plone login fo...

CVE-2017-18015

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

CVE-2017-18015: Improper Neutralization of Input During Web Page Generation

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

CVE-2017-18010

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

CVE-2017-18010

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

CVE-2017-18012: Improper Neutralization of Input During Web Page Generation

The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter...

PT-2018-6608

Name of the Vulnerable Software and Affected Versions: Z-URL Preview plugin version 1.6.1 Description: The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the url parameter in the class.zlinkpreview.php file. Recommendations: For Z-URL...

CVE-2017-18010: Improper Neutralization of Input During Web Page Generation

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

PT-2018-6606

Name of the Vulnerable Software and Affected Versions: E-goi Smart Marketing SMS and Newsletters Forms plugin versions prior to 2.0.0 Description: The issue concerns a cross-site scripting XSS flaw. It can be exploited via the "url" parameter in the admin/partials/custom/egoi-for-wp-form egoi.php...

willoughbyfuneralhomes.com XSS vulnerability

Open Bug Bounty ID: OBB-457128 Description| Value ---|--- Affected Website:| willoughbyfuneralhomes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

web-app.usc.edu XSS vulnerability

Open Bug Bounty ID: OBB-452199 Description| Value ---|--- Affected Website:| web-app.usc.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Information disclosure

IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682...

npo-bunkazai.org XSS vulnerability

Open Bug Bounty ID: OBB-447268 Description| Value ---|--- Affected Website:| npo-bunkazai.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-5227

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

CVE-2015-5227: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

PT-2017-6833

Name of the Vulnerable Software and Affected Versions Landing Pages plugin versions prior to 1.9.2 Description The issue allows remote attackers to execute arbitrary code. This is achieved via the url parameter. Recommendations For versions prior to 1.9.2, update to version 1.9.2 or later to...

kvit.dk XSS vulnerability

Vulnerable URL: http://www.kvit.dk/dk/learning/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9625879 VIP website...