1229 matches found
WordPress Carousel Slideshow Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Pondol Carousel Plugin <= 1.0 - Cross Site Scripting (XSS)
Because of this vulnerability, the variable "itemid" appears to send unsanitized data back to the users browser. Vulnerable file is /pondol-carousel/pages/admincreate.php. Solution Update the plugin...
Thumbnail Carousel Slider < 1.0.1 - Stored Cross-Site Scripting (XSS) & CSRF
The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor...
WordPress Kiwi Logo Carousel Plugin <= 1.7.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "tabflagsorder". Solution Update this plugin...
WordPress Kiwi Logo Carousel Plugin <= 1.7.1 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "tabflagsorder". Solution Update this plugin...
WordPress Carousel Slideshow Plugin <= 3.9 - Multiple Vulnerabilities
This plugin is prone to an unspecified vulnerabilities. Solution Update plugin...
WordPress Carousel Slideshow Plugin <= 3.9 - Multiple Vulnerabilities
This plugin is prone to an unspecified vulnerabilities. Solution Update plugin...
XEN Carousel < 0.12.2 - XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter
The xen-carousel WordPress plugin was affected by a XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter security vulnerability...
WordPress All In One Carousel Plugin <= 1.2.20 - Reflected XSS
This plugin is prone to a reflected cross site scripting vulnerability in /tpl/addcarousel.php id parameter. Solution Update the plugin...
CVE-2014-4602
Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
CVE-2014-4516
The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (
CVE-2014-4602
The CVE-2014-4602 entry concerns the WordPress XEN Carousel plugin (version 0.12.2 and earlier). The vulnerability is an XSS flaw in the admin asset xencarousel-admin.js.php, exploitable via the path or ajaxpath parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected...
CVE-2014-4602
Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...
CVE-2014-4516
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
Lc Flickr Carousel 1.0 - Local File Disclosure Vulnerability
No description provided by source. Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 ...
WordPress XEN Carousel Plugin <= 0.12.2 - Multiple XSS
Because of these multiple vulnerabilities in xencarousel-admin.js.php, the attackers can inject arbitrary web script or HTML via the "ajaxpath" or "path" parameter. Solution Update the plugin...
