232 matches found
GHSA-RWPR-83G3-96G7 Cross-site scripting in padrino-contrib
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
padrino-contrib XSS via caption parameter of breadcrumbs helper
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
CVE-2019-16145
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
CVE-2019-16145
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
CVE-2019-16145
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
CVE-2019-16145
CVE-2019-16145 affects the padrino-contrib breadcrumbs module (up to version 0.2.0) used with Padrino Framework. The root cause is an XSS in the caption parameter of breadcrumbs.rb that is not properly escaped, allowing script injection. This can enable an attacker to steal session tokens or perf...
CVE-2019-16145
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
PT-2019-14541
Name of the Vulnerable Software and Affected Versions Padrino Framework breadcrumbs contributed module version 0.2.0 and earlier Description The issue allows for XSS via a caption in the breadcrumbs contributed module. Recommendations For Padrino Framework breadcrumbs contributed module version...
CVE-2019-16145: Improper Neutralization of Input During Web Page Generation
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...
WordPress breadcrumbs-by-menu plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. breadcrumbs-by-menu is one of the plugins used in it. A cross-site scripting vulnerability exists in WordPress breadcrumbs-by-menu...
CVE-2019-15865
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15865
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15864
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...
Cross site request forgery (csrf)
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15865
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15864
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...
CVE-2019-15864
CVE-2019-15864 concerns the WordPress plugin breadcrumbs-by-menu, with a cross-site scripting (XSS) vulnerability in versions before 1.0.3. Public records (NVD/Red Hat/CNVD etc.) describe an XSS vulnerability in this plugin, affecting WordPress installations using the plugin prior to 1.0.3, and i...
WordPress breadcrumbs-by-menu plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. breadcrumbs-by-menu is one of the plugins used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...
PT-2019-14444
Name of the Vulnerable Software and Affected Versions breadcrumbs-by-menu plugin versions prior to 1.0.3 Description The issue is related to a CSRF problem in the breadcrumbs-by-menu plugin for WordPress. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resolve the...