EUVD-2018-8859

Malware in sbrugna...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

PT-2019-9391

Name of the Vulnerable Software and Affected Versions ZRLOG version 2.0.1 Description A Stored XSS issue was found in the nickname field of the comment area, allowing for potential malicious script execution. Recommendations For ZRLOG version 2.0.1, consider disabling the comment area or...

CVE-2018-18919

The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area...

CVE-2018-18919

The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area...

CVE-2018-18919

The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area...

CVE-2018-18919

The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area...

CVE-2018-18919: Improper Neutralization of Input During Web Page Generation

The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area...

PT-2018-14719

Name of the Vulnerable Software and Affected Versions WP Editor.md plugin version 10.0.1 Description The issue allows for XSS via the comment area, which can be exploited to execute malicious scripts. Recommendations For WP Editor.md plugin version 10.0.1, update to a newer version that contains ...

Ubiquiti Inc.: Reflected XSS

Due to the lack of sanitisation in the commend area, with a especially crafted message, is possible to execute a XSS with the "preview" function. If a draft is save, is possible to exploit this bug using as and stored-XSS. The "New Discussion" page on the Spanish and Portuguese forums have a...