Red Hat CoreOS Tectonic Cross-Site Scripting Vulnerability

Red Hat CoreOS Tectonic is an open source, automated enterprise Kubernetes platform from Red Hat. The platform is mainly used to automate the execution of operational tasks to achieve platform portability and multi-cluster management. A cross-site scripting vulnerability exists in Red Hat CoreOS...

formcraft3 plugin for WordPress cross-site scripting vulnerability

formcraft3 plugin for WordPress is a drag and drop form builder plugin for use in WordPress. A cross-site scripting vulnerability exists in formcraft3 plugin for WordPress versions prior to 3.4. The vulnerability stems from the WEB application failing to properly validate client-side data. An...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2019-32207)

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . A cross-site scripting vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by attackers to execute client-side code...

WordPress JobCareer theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.JobCareer theme is a plugin used in one of the job board themes. A cross-site scripting vulnerability exists in WordPress JobCareer the...

WordPress iThemes Exchange Invoices Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. iThemes Exchange for WordPress is one of the shopping invoices plugin. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Invoices Add-on. An attacker...

WordPress crafty-social-buttons plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. crafty-social-buttons is a plugin for adding links to social networking sites. A cross-site scripting vulnerability exists in the...

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2020-22382)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit th...

WordPress profile-builder plugin cross-site scripting vulnerability (CNVD-2019-32407)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress profile-builder plugin. An attacker can exploit...

WordPress aryo-activity-log plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...

cPanel cross-site scripting vulnerability (CNVD-2019-28999)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Apache Configuration Include Editor in versions prior to cPanel 68.0.27. T...

WordPress import-users-from-csv-with-meta plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress football-pool plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. football-pool is a plugin that analyzes statistics of soccer matches. A cross-site scripting vulnerability exists in the WordPress...

WordPress chained-quiz plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. chained-quiz is a chained quiz creation plugin used in it. A cross-site scripting vulnerability exists in the WordPress chained-quiz...

WordPress woocommerce-product-addon plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woocommerce-product-addon plugin is a product specification selection plugin for e-commerce used in it. A cross-site scripting...

WordPress Tribulant Newsletters Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Tribulant Newsletters plugin is a full-featured newsletter plugin used in it. A cross-site scripting vulnerability exists in WordPress...

cPanel cross-site scripting vulnerability (CNVD-2019-28986)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in api1listautoresponders in cPanel versions prior to 60.0.25. The vulnerability stem...

cPanel cross-site scripting vulnerability (CNVD-2019-28987)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the listftpstable AP in versions prior to cPanel 60.0.25. The vulnerabili...

cPanel cross-site scripting vulnerability (CNVD-2019-30473)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM MySQL Password Change interface in versions prior to cPanel 67.9999.103. T...

cPanel cross-site scripting vulnerability (CNVD-2019-26210)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 66.0.2. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26162)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 74.0.8. The vulnerability stems from a lack of proper...