2956 matches found
CVE-2018-5692
Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file...
CVE-2018-5687
NewsBee (CMS) vulnerability CVE-2018-5687: a stored/reflected XSS is possible via the Company Name field in Settings (admin/admin.php). The description across sources consistently states an XSS vulnerability in NewsBee’s Settings interface. Root cause: improper sanitization/escaping of input in t...
PT-2018-17084
Name of the Vulnerable Software and Affected Versions: NewsBee affected versions not specified Description: The issue allows for XSS via the Company Name field in the Settings under the admin/admin.php endpoint. Recommendations: At the moment, there is no information about a newer version that...
PT-2018-17089
Name of the Vulnerable Software and Affected Versions: Piwigo version 2.8.2 Description: The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the tab, to, section, mode, installstatus, and display parameters of the "admin.php" file...
CVE-2018-5687: Improper Neutralization of Input During Web Page Generation
NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php...
CVE-2018-5692: Improper Neutralization of Input During Web Page Generation
Piwigo v2.8.2 has XSS via the tab, to, section, mode, installstatus, and display parameters of the admin.php file...
Design/Logic Flaw
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
Design/Logic Flaw
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php formfield5label parameter...
Design/Logic Flaw
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php buttontextlink parameter...
CVE-2018-5666
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bgcolor parameter...
CVE-2018-5673
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5662
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
CVE-2018-5664
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php socialicon1 parameter...
PT-2018-17056
Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title icon parameter i...
CVE-2018-5671
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extrafield1itemsfielditem1pricepercent parameter...
CVE-2018-5658
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5661
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...
CVE-2018-5660
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soonsubtitle parameter...