6667 matches found
WordPress Translate WordPress-Google Language Translator plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...
WordPress Storefront Footer Text plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Storefront Footer Text plugin in version 1.0.1 an...
WordPress Unlimited PopUps Plugin SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...
TYPO3 cross-site scripting vulnerabilities
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.TYPO3 has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output, which can be exploited by an attacker with TYP...
Appointment Booking Calendar System Cross-site Script Vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...
WordPress Booking.com Banner Creator Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....
Airangel Hsmx Gateway Cross-Site Script Vulnerability
Airangel Hsmx Gateway is a platform from Airangel UK. It is used to manage authentication and billing in the network.A cross-site scripting vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from a lack of data validation filtering of user-supplied data and...
WordPress AddToAny Share Buttons Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...
CVE-2021-43187
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
Information disclosure
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
CVE-2021-43187
CVE-2021-43187 affects YouTrack Mobile (JetBrains). In YouTrack Mobile before 2021.2, the iOS client-side cache could contain sensitive information, enabling information disclosure. The issue is documented across multiple sources (NVD entry and Red Hat/CNVD mirrors) with this vulnerability class....
CVE-2021-43187
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
CVE-2021-43187: Undefined Security Weakness
In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...
PT-2021-23769
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack Mobile versions prior to 2021.2 Description The client-side cache on iOS could contain sensitive information. Recommendations For versions prior to 2021.2, update to version 2021.2 or later to resolve the issue...
JetBrains YouTrack security vulnerabilities
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from a client-side cache on iOS that could contain sensitive information. An attacker could use...
in cortezaproject/corteza-server
Description There's no bound limit to the number of "characters/special characters" in the name field of the user. Vulnerable Field: Full Name By sending a very long string it’s possible to cause a denial a service attack on the server. This may lead to the website becoming unavailable or...
WordPress cross-site scripting vulnerabilities
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....
JetBrains YouTrack Cross-site Scripting Vulnerabilities
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...
SourceCodester Tailor Management Cross-site Scripting Vulnerabilities
SourceCodester Tailor Management is an open source tailor management system software from the individual developer Warren Daloyan. A security vulnerability exists in SourceCodester Tailor Management, which stems from a lack of proper validation of client-side data in the web application. An...
WordPress plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...