Lucene search
+L

4 matches found

CNVD
CNVD
•added 2017/12/29 12:00 a.m.•57 views

WordPress Payment Form for PayPal Pro Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Payment Form for PayPal Pro plugin is used in one of the payment plugin. WordPress Payment Form for PayPal Pro...

6.1CVSS6AI score0.01784EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/27 12:00 a.m.•10 views

CVE-2015-7666: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the 1 cpupdateMessageItem and 2 cpdeleteMessageItem functions in cppppadminintmessagelist.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal...

6.1CVSS6.4AI score0.01784EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/12/27 12:00 a.m.•4 views

PT-2017-7252

Name of the Vulnerable Software and Affected Versions Payment Form for PayPal Pro plugin versions prior to 1.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the cp ppp admin int message list.inc.php file. These vulnerabilities are located in the 1 cp...

6.1CVSS0.01784EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/30 12:00 a.m.•7 views

CVE-2006-3319: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the cal parameter...

4.3CVSS6AI score0.01394EPSS
SaveExploits1References1
Rows per page
Query Builder