CVE-2022-0647: Improper Neutralization of Input During Web Page Generation

The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the posttype parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0643: Improper Neutralization of Input During Web Page Generation

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-13327

Name of the Vulnerable Software and Affected Versions Bulk Creator WordPress plugin versions prior to 1.0.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the post type parameter is not properly sanitized and escaped before being outputted back in ...

WordPress plugin Mapping Multiple URLs Redirect Same Page 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

WordPress plugin Conference Scheduler 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

WordPress plugin Database Peek 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

WordPress plugin Bank Mellat 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Bank Mellat plugin 1.3.7 and earlier versions have a cross-site scripting vulnerability that stems from a failure to clean a...

PT-2022-13304

Name of the Vulnerable Software and Affected Versions Delete Old Orders WordPress plugin versions 0.2 and earlier Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the date parameter is not properly sanitized and escaped before being outputted back in an...

CVE-2022-0641: Improper Neutralization of Input During Web Page Generation

The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the aysfbtab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0619: Improper Neutralization of Input During Web Page Generation

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0600: Improper Neutralization of Input During Web Page Generation

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-27885

Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...

CVE-2022-27885

Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...

Cross site scripting

Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/vod/data.html via the repeat parameter...

CVE-2022-25574

A stored cross-site scripting XSS vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file...

PT-2022-17162

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue allows an authenticated user to inject SQL queries in the "mtms/admin/?page=transaction/view details" endpoint via the id parameter. Recommendations For Money Transfer Manageme...

CVE-2022-25223: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/viewdetails' via the 'id' parameter...

CVE-2022-0628

The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25019

The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

Cross site scripting

The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...