CVE-2018-18373

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sbajaxaddmessage action...

Cross site scripting

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sbajaxaddmessage action...

WordPress Support Board 1.2.3 Cross Site Scripting

Exploit Title: Support Board - PHP & Wordpress Plugin v1.2.3 - HTML Injection and Stored XSS Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: https://schiocco.com/ Software Link : https://board.support/ Software : Support Board - Chat And Help Desk Version : v1.2.3 Vulernability...

CVE-2018-16285

The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userproshortcodetemplate action to wp-admin/admin-ajax.php...

WordPress Gift Vouchers SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on servers running PHP and MySQL.The Gift Vouchers plugin is an e-gift voucher plugin that is used in... A SQL injection vulnerability exists in the...

CVE-2018-16159

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the templateid parameter in a wp-admin/admin-ajax.php wpgvdoajaxfronttemplate request...

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fwdata id1, fwdata id2, fwdata id3, fwdata id4, or email field of the contact form, exploitable with an fwsendemail action to wp-admin/admin-ajax.php...

joyplus-cms cross-site scripting vulnerability (CNVD-2018-17480)

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...

joyplus-cms SQL Injection Vulnerability

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A SQL injection vulnerability exists in joyplus-c...

knowlewesthealthpark.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-638047 Description| Value ---|--- Affected Website:| knowlewesthealthpark.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kwiek-lenig.nl XSS vulnerability

Open Bug Bounty ID: OBB-638043 Description| Value ---|--- Affected Website:| kwiek-lenig.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lyceevinciblanquefort.fr XSS vulnerability

Open Bug Bounty ID: OBB-638037 Description| Value ---|--- Affected Website:| lyceevinciblanquefort.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

groothalletoerist.be XSS vulnerability

Open Bug Bounty ID: OBB-638007 Description| Value ---|--- Affected Website:| groothalletoerist.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gewerbeforum-zorneding.de XSS vulnerability

Open Bug Bounty ID: OBB-637946 Description| Value ---|--- Affected Website:| gewerbeforum-zorneding.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

friends-of-turkey.eu XSS vulnerability

Open Bug Bounty ID: OBB-637944 Description| Value ---|--- Affected Website:| friends-of-turkey.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sc.basisschool-calasanz.be XSS vulnerability

Open Bug Bounty ID: OBB-637908 Description| Value ---|--- Affected Website:| sc.basisschool-calasanz.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

entertainment-nl.nl XSS vulnerability

Open Bug Bounty ID: OBB-637906 Description| Value ---|--- Affected Website:| entertainment-nl.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bffec.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-637905 Description| Value ---|--- Affected Website:| bffec.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eb-s.nl XSS vulnerability

Open Bug Bounty ID: OBB-637889 Description| Value ---|--- Affected Website:| eb-s.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

earth2observe.eu XSS vulnerability

Open Bug Bounty ID: OBB-637798 Description| Value ---|--- Affected Website:| earth2observe.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...