CVE-2022-1396

The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfilteredhtml capability is disallowed...

Unfixed Redirect vulnerability at www.advertlets.com

Security researcher hexon, has submitted on 29/10/2010 a Redirect vulnerability affecting www.advertlets.com, which at the time of submission ranked 41833 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed. If y...