Cross site scripting

An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CS...

CMS Balitbang Depdiknas 3.4 HTML Injection

============================================ CMS Balitbang Depdiknas v3.4 HTML Injection ============================================ :----------------------------------------------------------------------------------------------------: : Exploit Title : CMS Balitbang Depdiknas v3.4 HTML Injectio...