PT-2018-12841

Name of the Vulnerable Software and Affected Versions EMLsoft version 5.4.5 Description A security issue was found in the software, where a Cross-Site Scripting XSS attack can be performed. This issue is related to the "eml/upload/eml/?action=address&do=edit" page, which is an API endpoint...

WordPress NEX-Forms Lite Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . NEX-Forms Lite is one of the user-defined plugin to create forms . A cross-site scripting vulnerability exists in...

PT-2016-3497

Name of the Vulnerable Software and Affected Versions NEX-Forms Lite plugin version 2.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the form fields parameter in a 1 do edit or 2 do insert action to the "/wp-admin/admin-ajax.php" API...