Import Legacy Media <= 0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Movies <= 0.6 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

CVE-2014-4535

The Import Legacy Media plugin for WordPress (version 0.1 and earlier ) is vulnerable to a Cross-site scripting (XSS) vulnerability. The root cause is a lack of proper validation of client-side data, specifically allowing remote attackers to inject arbitrary web scripts or HTML via the filename p...

Cross site scripting

Cross-site scripting XSS vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

CVE-2014-4539

Cross-site scripting XSS vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

CVE-2014-4539

CVE-2014-4539 : A cross-site scripting (XSS) flaw in the WordPress Movies plugin (versions 0.6 and earlier) exists due to insufficient validation in the filename parameter of getid3/demos/demo.mimeonly.php. This allows remote attackers to inject arbitrary script/HTML, potentially executing code i...

PT-2019-7111

Name of the Vulnerable Software and Affected Versions Import Legacy Media plugin versions 0.1 and earlier for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the filename parameter to "getid3/demos/demo.mimeonly.php"...

CVE-2014-4539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

CVE-2014-4535: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

PT-2019-7113

Name of the Vulnerable Software and Affected Versions Movies plugin versions 0.6 and earlier for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the filename parameter to "getid3/demos/demo.mimeonly.php". Recommendations Fo...