WP-Ban 跨站脚本漏洞

WP-Ban is a blog by Lester Chan, a personal developer that bans users from WordPress via IP, IP range, hostname, user agent and referring url. WP-Ban suffers from a security vulnerability that stems from an unknown function in its ban-options.php file that allows an attacker to implement cross-si...

WP-Ban 安全漏洞

WP-Ban is a blog by Lester Chan, an individual developer, that bans users from accessing WordPress via IP, IP range, hostname, user agent, and referring url. A security vulnerability exists in WP-Ban, which stems from the manipulation of a parameter in the togglecheckbox function of its...

CVE-2021-4252 WP-Ban ban-options.php toggle_checkbox cross site scripting

A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function togglecheckbox of the file ban-options.php. The manipulation of the argument $SERVER"HTTPUSERAGENT" leads to cross site scripting. The attack may be initiated remotely. The name of the...

TikTok is being discouraged and the app may be banned

In recent news retail giant Amazon sent a memo to employees telling them to delete the popular social media app TikTok from their phones. In the memo it stated that the app would pose a security risk without going into details. Later the memo was withdrawn without an explanation except that it wa...