CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

Cross site scripting

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

CVE-2019-17207

The CVE concerns the WordPress Broken Link Checker plugin (version 1.11.8) where the vulnerability resides in includes/admin/table-printer.php. A reflected cross-site scripting (XSS) flaw is triggered via the s_filter parameter in the admin tools page (wp-admin/tools.php?page=view-broken-links), ...

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-37378)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to...

HCL Traveler Cross-Site Scripting Vulnerability

HCL Traveler is a real-time synchronization of email, calendar, address book data, etc. A cross-site scripting vulnerability exists in HCL Traveler 9.x and prior versions, which stems from a lack of proper validation of client-side data by the web application and can be exploited by an attacker t...

WordPress Broken Link Check Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-checker is an invalid link checker plugin used in it. A cross-site scripting vulnerability exists in the...

Medium: httpd24

Issue Overview: A vulnerability was found in Apache httpd, in modhttp2. Under certain circumstances, HTTP/2 early pushes could lead to memory corruption, causing a server to crash.CVE-2019-10081 A read-after-free vulnerability was discovered in Apache httpd, in modhttp2. A specially crafted http/...

HongCMS Cross-Site Scripting Vulnerability (CNVD-2019-36221)

HongCMS is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in HongCMS. An attacker can exploit this vulnerability to execute client-side code...

WordPress Cross-Site Scripting Vulnerability (CNVD-2019-37380)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to...

HongCMS Cross-Site Scripting Vulnerability (CNVD-2019-36222)

HongCMS is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in HongCMS. An attacker can exploit this vulnerability to execute client-side code...

HongCMS Cross-Site Scripting Vulnerability (CNVD-2019-36217)

HongCMS is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in HongCMS. An attacker can exploit this vulnerability to execute client-side code...

WordPress incoming-links plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. incoming-links is a plugin for adding inbound links. A cross-site scripting vulnerability exists in the WordPress incoming-links...

WordPress content-grabber plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. content-grabber is an automated web content grabber plugin used in it. A cross-site scripting vulnerability exists in the WordPres...

WordPress searchterms-tagging-2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

NETGEAR JNR1010 Cross-Site Scripting Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in versions prior to NETGEAR JNR1010 1.0.0.32, which can be exploited by an attacker to execute client-side code...

WordPress broken-link-manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-36981)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.1 and 7.10.2. The vulnerabili...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36914)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...

NCH Software Express Invoice Cross-Site Scripting Vulnerability

NCH Software Express Invoice is an inventory system from NCH Software Australia. The system is mainly used for invoice management, etc. A cross-site scripting vulnerability exists in NCH Software Express Invoice version 7.12, which stems from the lack of proper validation of client-side data in t...

Hotaru CMS Cross-Site Scripting Vulnerability

Hotaru CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Hotaru CMS v1.7.2. The vulnerability stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to...