AVG AntiVirus Cross-Site Scripting Vulnerability (CNVD-2020-10164)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A cross-site scripting vulnerability exists in Network Notification Popup in Avast AntiVirus Free, Internet Security and Premiere Edition version 19.3.2369 build 19.3.4241.440. The vulnerability stems from a lack of...

F5 BIG-IP cross-site scripting vulnerability (CNVD-2019-39753)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in F5 BIG-IP versions 13.1.0 through 13.1.3, 12.1.0 through 12.1.5, and 11.5.2...

WordPress Modern theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Modern theme is a multi-functional website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress Modern...

WordPress Easy Digital Downloads Recount Earnings extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Recount Earnings extension is a sales statistics plugin used in it. A cross-site scripting vulnerability...

WordPress Auberge theme cross-site scripting vulnerability

WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Auberge theme is a responsive restaurant website theme plugin used in it. WordPress Auberge theme suffers from a cross-sit...

WordPress weeklynews theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. weeklynews theme is a news site theme plugin used in it. WordPress weeklynews theme suffers from a cross-site scripting vulnerability...

Amazon Linux 2 : httpd (ALAS-2019-1341)

A cross-site scripting vulnerability was found in Apache httpd, affecting the modproxy error page. Under certain circumstances, a crafted link could inject content into the HTML displayed in the error page, potentially leading to client-side exploitation.CVE-2019-10092 A vulnerability was...

CVE-2019-18207

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page...

CVE-2019-18207

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page...

Input validation

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page...

CVE-2019-18207

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page...

CVE-2019-18207

Summary: CVE-2019-18207 affects Zucchetti InfoBusiness ≤ 4.4.1. An authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload is triggered whenever users browse the reports page. Affected software: Zucchetti InfoBusi...

LabKey Server Cross-Site Scripting Vulnerability

LabKey Server is a biomedical research data repository from LabKey, Inc. The repository allows Web-based querying, reporting, and collaboration across a wide range of data sources. A cross-site scripting vulnerability exists in LabKey Server. An attacker could exploit this vulnerability to execut...

WordPress Easy Digital Downloads Simple Shipping extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Easy Digital Downloads EDD Simple Shipping extension is a digital product sales plugin used in it. A cross-site...

pixelpost cross-site scripting vulnerability (CNVD-2019-39941)

pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A cross-site scripting vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execut...

WordPress Easy Digital Downloads Upload File extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Upload File extension is a file upload plugin used in it. A cross-site scripting vulnerability...

WordPress Easy Digital Downloads Quota theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Quota theme is a Quota theme plugin used in it. A cross-site scripting vulnerability exists in th...

Pootle Cross-Site Scripting Vulnerability

Pootle is an online translation management tool. A cross-site scripting vulnerability exists in version 2.0.5-0.2 of pootle, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-side code...

WordPress Easy Digital Downloads Digital Store theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Digital Store theme is used in which a digital product online sales theme website plugin. A...

WordPress Easy Digital Downloads Free Downloads extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Free Downloads extension is a free download management plugin used in it. A cross-site scripting...