43 matches found
Cross site scripting
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
UBUNTU-CVE-2020-15138
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
CVE-2020-15138
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
CVE-2020-15138 Cross-Site Scripting in Prism
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
CVE-2020-15138
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
PT-2020-14218
Name of the Vulnerable Software and Affected Versions Prism versions 1.1.0 through 1.20.0 Prism Previewers plugin versions 1.10.0 through 1.20.0 Prism Previewer: Easing plugin versions 1.1.0 through 1.9.0 Description The easing preview of the Previewers plugin has a Cross-Site Scripting XSS...
CVE-2020-15138: Improper Neutralization of Input During Web Page Generation
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
WordPress Easing Slider Plugin Cross-Site Request Forgery (CVE-2015-1436)
A cross-site request forgery CSRF vulnerability has been reported in WordPress Easing Slider Plugin. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker-controlled website...
Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin
Advisory ID: HTB23249 Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor Patch: January 22, 2015 Public...
CVE-2015-1436
Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...
CVE-2015-1436
Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...
CVE-2015-1436
The CVE refers to a Cross-Site Scripting (XSS) vulnerability in the WordPress Easing Slider plugin (versions up to 2.2.0.6) caused by insufficient sanitization of the HTTP GET parameter edit in admin.php when page is easingslider_manage_customizations or easingslider_edit_sliders. Impact: attacke...
PT-2015-5287
Name of the Vulnerable Software and Affected Versions Easing Slider plugin versions prior to 2.2.0.7 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML. The attack vector involves the edit...
CVE-2015-1436: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...
WordPress Plugin Easing Slider Has Multiple Cross-Site Scripting Vulnerabilities
WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . WordPress Easing Slider Plugin is a wordpress-based plugin . WordPress Easing Slider Plugin has multiple cross-site scripting vulnerabilities that can...
WordPress Easing Slider 2.2.0.6 Cross Site Scripting
Advisory ID: HTB23249 Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor Patch: January 22, 2015 Public...
WordPress Easing Slider 2.2.0.6 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor...
Easing Slider <= 2.2.0.6 - 2 x Cross-Site Scripting (XSS)
The Easing Slider WordPress plugin was affected by a 2 x Cross-Site Scripting XSS security vulnerability...
WordPress Easing Slider Plugin <= 2.2.0.6 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...