WordPress realty plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. realty is used in one of the real estate website creation plugin. A cross-site scripting vulnerability exists in the...

WordPress promobar plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. promobar is a plugin used in it to add page banners with timing features. A cross-site scripting vulnerability exists in the WordPress...

WordPress football-pool plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. football-pool is a plugin that analyzes statistics of soccer matches. A cross-site scripting vulnerability exists in the WordPress...

WordPress pdf-print plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. pdf-print is used in one of the PDF files used to generate, and support for the print function of the plug-in. There is a...

WordPress bws-smtp plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. bws-smtp is a plugin used in it to configure an SMTP server to receive e-mail. A cross-site scripting vulnerability exists ...

WordPress pagination plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pagination is a custom pagination plugin used in it. A cross-site scripting vulnerability exists in the WordPress pagination plugi...

MantisBT Cross-Site Scripting Vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. MantisBT suffers from a cross-site scripting vulnerability. The vulnerability stems from the lack of proper validati...

Input validation

Newgen OmniFlow Intelligent Business Process Suite iBPS 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored on the server side and fetched from the server every time the user visits the D, creating business...

CVE-2019-10098

A vulnerability was discovered in Apache httpd, in modrewrite. Certain self-referential modrewrite rules could be fooled by encoded newlines, causing them to redirect to an unexpected location. An attacker could abuse this flaw in a phishing attack or as part of a client-side attack on browsers...

WordPress bws-google-analytics plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...

WordPress cforms2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cforms2 is a form builder plugin used in it. A cross-site scripting vulnerability exists in WordPress cforms2 plugin versions prio...

WordPress easy-digital-downloads plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. easy-digital-downloads is an e-commerce plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

ZTE ZXHN F670 Cross-Site Scripting Vulnerability

The ZTE ZXHN F670 is a modem from China's ZTE Corporation ZTE. A cross-site scripting vulnerability exists in the ZTE ZXHN F670. An attacker can exploit this vulnerability to execute client-side code...

WordPress xo-security plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. xo-security is a plugin used to enhance login-related security. A cross-site scripting vulnerability exists in the WordPress xo-securi...

DWSurvey Cross-Site Scripting Vulnerability

DWSurvey is a questionnaire system written in Java. A cross-site scripting vulnerability exists in DWSurvey 2019-07-22 and earlier versions, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...

Apache httpd Cross-Site Scripting Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A cross-site scripting vulnerability exists in the modproxy error page in Apache httpd, which can be exploited by an attacker to execute...

Clickjacking Evolves to Hook Millions of Top-Site Visitors

Clickjacking, where links on a website redirect unknowing users to spam, advertising or malware, has been around for decades. However, new tactics that defy the best mitigation efforts of browsers has led to it affecting millions of internet users browsing the web’s top sites, researchers found i...

CloudBees Jenkins Build Pipeline Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in the CloudBees Jenkins Build Pipeline Plugin, which can be exploited by an attacker to execute client-side code...

WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30372)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...

CloudBees Jenkins Wall Display Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in CloudBees Jenkins Wall Display Plugin, which can be exploited by an attacker to execute client-side code...