CVE-2019-16145: Improper Neutralization of Input During Web Page Generation

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

WordPress breadcrumbs-by-menu plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. breadcrumbs-by-menu is one of the plugins used in it. A cross-site scripting vulnerability exists in WordPress breadcrumbs-by-menu...

CVE-2019-15865

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15864

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...

CVE-2019-15865

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...

Cross site request forgery (csrf)

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15865

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15864

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...

CVE-2019-15864

CVE-2019-15864 concerns the WordPress plugin breadcrumbs-by-menu, with a cross-site scripting (XSS) vulnerability in versions before 1.0.3. Public records (NVD/Red Hat/CNVD etc.) describe an XSS vulnerability in this plugin, affecting WordPress installations using the plugin prior to 1.0.3, and i...

CVE-2019-15865: Cross-Site Request Forgery (CSRF)

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15864: Improper Neutralization of Input During Web Page Generation

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS...

WordPress breadcrumbs-by-menu plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. breadcrumbs-by-menu is one of the plugins used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...

WordPress Breadcrumbs by menu plugin <= 1.0.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress Breadcrumbs by menu plugin versions = 1.0.1. Solution Update the WordPress Breadcrumbs by menu plugin to the latest available version at least 1.0.3...

WordPress Breadcrumbs by menu plugin <= 1.0.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Breadcrumbs by menu plugin versions = 1.0.1. Solution Update the WordPress Breadcrumbs by menu plugin to the latest available version at least 1.0.3...

Breadcrumbs by menu <= 1.0.1 - Multiple Issues

XSS, CSRF leading to options update...

Fedora Update for drupal7-path_breadcrumbs FEDORA-2019-c12c2f0c22

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: drupal7-path_breadcrumbs-3.4-1.fc29

Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...

[SECURITY] Fedora 30 Update: drupal7-path_breadcrumbs-3.4-1.fc30

Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...

Fedora Update for drupal7-path_breadcrumbs FEDORA-2019-78bfda5218

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-Site Scripting (XSS)

Apache JSPWiki is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the ReferredPagesPlugin and navigation breadcrumbs, to steal session tokens or perform unwanted actions on behalf of the user...