GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2020-20392)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 versions prior to 5.3.2.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter...

CVE-2019-8447

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery CSRF vulnerability...

CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal...

CVE-2018-20980

The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...

CVE-2016-10918

The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

CVE-2017-18559

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...

CVE-2012-6714

The count-per-day plugin before 3.2.3 for WordPress has XSS via search words...

CVE-2016-10899

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability...

CVE-2016-10896

The seo-redirection plugin before 4.3 for WordPress has stored XSS...

Clam AntiVirus Denial of Service Vulnerability

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A denial of service vulnerability exists in ClamAV versions prior to 0.101.3, which can be exploited by attackers to cause ...

CVE-2017-18541

The xo-security plugin before 1.5.3 for WordPress has XSS...

CVE-2017-18542

The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18548

The note-press plugin before 0.1.2 for WordPress has SQL injection...

PT-2019-13436 · Impress · Give

Name of the Vulnerable Software and Affected Versions: Impress GiveWP Give plugin versions prior to 2.5.1 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the includes/payments/class-payments-query.php file...

CVE-2016-10883

The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users...

WordPress simple-membership plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-membership plugin is a website membership plugin used in it. Cross-site scripting vulnerability exists in WordPress...

CVE-2017-18494

The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues...

WordPress CP Contact Form with PayPal Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.CP Contact Form with PayPal is a Paypal payment form plugin used in it. A cross-site scripting vulnerability exists in the Publishing...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-27253)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in the activity stream gadget in Atlassian Jira versions prior to 7.13.1. The...