CVE-2025-15692: Improper Neutralization of Input During Web Page Generation

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

CVE-2021-24539: Improper Neutralization of Input During Web Page Generation

The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfilteredhtml capability is disallowed, leading to an...

PT-2021-16060

Name of the Vulnerable Software and Affected Versions Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin versions prior to 1.6.7 Description The issue arises from the plugin's failure to sanitise or escape its description setting when outputting it in the frontend whil...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CVE-2018-1000411: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...