CVE-2017-7723: Improper Neutralization of Input During Web Page Generation

XSS exists in Easy WP SMTP before 1.2.5, a WordPress Plugin, via the e-mail subject or body...

PT-2017-17908

Name of the Vulnerable Software and Affected Versions Easy WP SMTP version 1.2.4 and earlier Description A security issue exists in the Easy WP SMTP WordPress plugin, where XSS can be triggered via the e-mail subject or body. Recommendations For Easy WP SMTP version 1.2.4 and earlier, update to...

PT-2012-4118

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus version 8.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via various means, including an e-mail message body or subject, using techniques such as a SCRIPT element, crafted...

PT-2011-1234

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4 Description The issue is related to the iconv mime decode headers function in the Iconv extension, which does not properly handle unrecognized encodings. This can be exploited by remote attackers to trigger an...