CVE-2019-14913

An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...

iThemes Security <= 6.9.0 - Cross-Site Scripting (XSS)

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

Design/Logic Flaw

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page...

CVE-2017-15270

The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values CSV file. This can be used by attackers to hide data in the Graphical User Interface GUI view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' a...