lcmspubcontact.lc.ca.gov Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1029517 Security Researcher Gh05tPT Helped patch 6889 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting lcmspubcontact.lc.ca.gov...

CVE-2014-4599

CVE-2014-4599 affects the WordPress WP-Business Directory (wp-ttisbdir) plugin, specifically version 1.0.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws in forms/search.php that allow remote attackers to inject arbitrary script/HTML via the edit, search_term, page_id...

CVE-2014-4599

Multiple cross-site scripting XSS vulnerabilities in forms/search.php in the WP-Business Directory wp-ttisbdir plugin 1.0.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 edit, 2 searchterm, 3 pageid, 4 page, or 5 pagelinks parameter...