30 matches found
EUVD-2015-2110
Malware in sbrugna...
CVE-2015-20106
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-100244)
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin ClickBank Affiliate Ads prior to...
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-95139)
WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin ClickBank Affiliate Ads version 1.20 before there is a cross-site scripting vulnerability,...
CVE-2015-20105
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
CVE-2015-20106
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
Cross site scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
Cross site scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
CVE-2015-20106 ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
CVE-2015-20106
CVE-2015-20106 affects the WordPress plugin "ClickBank Affiliate Ads" up to version 1.20. The vulnerability is a stored Cross-Site Scripting (XSS) in the plugin’s settings due to insufficient escaping/non-filtering, enabling high-privilege users to inject scripts even when unfiltered_html is disa...
WordPress 跨站脚本漏洞
WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin ClickBank Affiliate Ads version 1.20 before there is a cross-site scripting vulnerability,...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin ClickBank Affiliate Ads prior to...
PT-2021-8385
Name of the Vulnerable Software and Affected Versions ClickBank Affiliate Ads WordPress plugin versions 1.20 and earlier Description The issue arises from the lack of a CSRF check when saving settings, allowing an attacker to manipulate a logged-in admin into changing them via a CSRF attack...
PT-2021-8386
Name of the Vulnerable Software and Affected Versions ClickBank Affiliate Ads WordPress plugin versions 1.20 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the plugin not escaping its settings, even when the unfiltered html is...
CVE-2015-20106: Improper Neutralization of Input During Web Page Generation
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
CVE-2015-20105: Improper Neutralization of Input During Web Page Generation
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scriptin...
ISPs Caught Injecting Cryptocurrency Miners and Spyware In Some Countries
Governments in Turkey and Syria have been caught hijacking local internet users' connections to secretly inject surveillance malware, while the same mass interception technology has been found secretly injecting browser-based cryptocurrency mining scripts into users' web traffic in Egypt...
WordPress Genie Affiliate Ads for Clickbank Products Plugin Cross-Site Scripting Vulnerability
MyCBGenie Affiliate Ads for Clickbank Products plugin is one of the advertisement plugins that are used in WordPress, a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers. MyCBGenie...
