WordPress aryo-activity-log plugin cross-site scripting vulnerability (CNVD-2019-32409)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...

WordPress duplicate-post plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress duplicate-post plugin. An attacker can exploit th...

WordPress wp-front-end-profile plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-front-end-profile plugin. An attacker can...

WordPress booking-calendar-contact-form plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker...

WordPress bws-testimonials plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-testimonials plugin. An attacker can exploit...

WordPress megamenu plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. megamenu is a menu management plugin used in it. A cross-site scripting vulnerability exists in the WordPress megamenu plugin. An...

WordPress stop-user-enumeration plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. stop-user-enumeration is a plugin that is used to protect against site user enumeration attacks. A cross-site scripting vulnerability...

WordPress bws-google-maps plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-google-maps plugin. An attacker can exploit...

WordPress analytics-tracker plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. A cross-site scripting vulnerability exists in the WordPress analytics-tracker plugin. An attacker can exploit the vulnerability to execute client-side code...

WordPress import-users-from-csv-with-meta plugin cross-site scripting vulnerability (CNVD-2020-22384)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress wp-slimstat plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-slimstat is a website monitoring plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2020-22382)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit th...

WordPress option-tree plugin cross-site scripting vulnerability (CNVD-2019-31010)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. A cross-site scripting vulnerability exists in the WordPress...

WordPress awesome-support plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress chained-quiz plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. chained-quiz is a chained quiz creation plugin used in it. A cross-site scripting vulnerability exists in the WordPress chained-quiz...

WordPress moreads-se plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. moreads-se is a web advertising add-on plugin used in it. A cross-site scripting vulnerability exists in the WordPress moreads-se...

WordPress import-users-from-csv-with-meta plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress user-role plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. user-role is a plug-in for website user management. A cross-site scripting vulnerability exists in the WordPress user-role plugin...

WordPress raygun4wp plugin cross-site scripting vulnerability (CNVD-2019-31144)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on PHP and MySQL servers. raygun4wp is a website monitoring plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

cPanel cross-site scripting vulnerability (CNVD-2019-28999)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Apache Configuration Include Editor in versions prior to cPanel 68.0.27. T...