Reflected XSS in Ultimate Member WordPress Plugin

High-Tech Bridge Security Research Lab discovered vulnerability in Ultimate Member WordPress plugin, intended for managing users’ profiles. The vulnerability can be used against website administrators to perform Cross-Site Scripting XSS attacks. Anonymous attacker might be able to steal...

Apache Ambari Cross-Site Scripting Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A cross-site scripting vulnerability exists...

Splunk cross-site scripting vulnerability (CNVD-2015-06482)

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. A cross-site scripting vulnerability exists in Splunk versions 6.2.6 prior to 6.2.0, which can be exploited by an attacker to execute arbitrary script code, steal cookie-based authentication and...

WordPress Cross-Site Scripting Vulnerability (CNVD-2015-06150)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A cross-site scripting vulnerability exists in WordPress, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication and launch other attack...

Amazon Linux: Security Advisory (ALAS-2014-421)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal Ajax System Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Ajax System, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies,...

Drupal Search API Autocomplete Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Search API Autocomplete is one of the modules used to add autocomplete functionality to search fields during searches and provide a list of suggestions. A cross-site scripting...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Time Tracker Module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Time Tracker is one of the time tracking system modules. The Drupal Time Tracker module has multiple cross-site scripting vulnerabilities that can be exploited by attackers to cause the...

Fastspot BigTree has multiple vulnerabilities

Fastspot BigTree is a PHP and MySQL based open source content management system . SQL injection vulnerabilities and cross-site scripting vulnerabilities exist in Fastspot BigTree, which can be exploited by an attacker to steal cookie-based authentication or to control the application, access or...

Codoforum has multiple vulnerabilities

Codoforum is a free PHP and MySQL based forum software. A SQL injection vulnerability and a cross-site scripting vulnerability exists in Codoforum version 3.3.1, which can be exploited by an attacker to steal cookie-based authentication, take control of an application, access or modify data, or...

WordPress Plugin Flickr Justified Gallery 'fjgwpp.php' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

WordPress Flickr Justified Gallery plugin 'fjgwpp.php' cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

Git GitWeb HTML Injection Vulnerability

Git gitweb is a WEB-based management interface for git. An HTML injection vulnerability exists in Git GitWeb. Because the program fails to properly filter user-supplied input, an attacker could exploit the vulnerability to run executable HTML and script code in the context of an affected browser,...

Apple Mac OS X 'entity' Parameter Cross-Site Scripting Vulnerability

Apple Mac OS X is a commercial operating system. A cross-site scripting vulnerability exists in the Apple Mac OS X 'entity' parameter. Because the program fails to properly filter user-supplied input, an attacker could exploit the vulnerability to execute arbitrary script code in the browser of a...

WordPress Plugin Job Manager 0.7.22 - Persistent Cross-Site Scripting

WordPress Plugin Job Manager 0.7.22 - Persistent Cross-Site Scripting Job Manager Persistent XSS Details ======================================================================================== Product: Job Manager Plugin For Wordpress Vendor-URL: www.wp-jobmanager.com CVE-ID: CVE-2015-2321 Credi...

Wordpress Ephox Plupload Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed in PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Ephox Plupload is a Web browser-based file upload module from Ephox, which supports displaying upload progress, automatic image...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. Th...

Cross-site Scripting Vulnerability in the Mail System of Hainan YiPost Software Co.

Hainan YiPost Software Co., Ltd. provides related network communication collaboration software integration program. A cross-site scripting vulnerability exists in the mail system of Hainan YiPost Software Co., Ltd. that can be exploited by an attacker to obtain user cookie information and execute...

SO Planning Cross-Site Scripting Vulnerability

SO Planning is a free and open source set of online project production and management tools. A cross-site scripting vulnerability exists in SO Planning. The program fails to adequately filter user-submitted input. When a user navigates to the affected site, their browser will execute arbitrary...

Fortinet FortiSandbox Cross-Site Scripting Vulnerability

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. A cross-site scripting vulnerability exists in Fortinet FortiSandbox 2.0.3 and...