2156 matches found
CVE-2023-23664
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin = 1.0.19 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin = 1.0.19 versions...
CVE-2023-23664
CVE-2023-23664 describes a Stored XSS in the ConvertBox Auto Embed WordPress plugin (versions
WordPress plugin ConvertBox Auto Embed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. relevant is a relevant content display plugin used in it. wordpress plugin is an...
PT-2023-19110
Name of the Vulnerable Software and Affected Versions ConvertBox Auto Embed WordPress plugin versions 1.0.19 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication...
CVE-2020-18280
Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...
PT-2023-11487 · Unknown · Phodal Cmd
Name of the Vulnerable Software and Affected Versions: Phodal CMD version 1.0 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the EMBED SRC function. This enables the attacker to perform unauthorized actions on the system. Recommendations: For Phoda...
CVE-2020-18280
Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...
CVE-2020-18280
Phodal CMD v.1.0 is affected by a Cross Site Scripting vulnerability that allows a local attacker to execute arbitrary code via the EMBED SRC function. Affected component: Phodal CMD, version 1.0. Root cause: EMBED SRC function enables code execution through XSS. In the available documents, explo...
CVE-2023-23664: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin = 1.0.19 versions...
CVE-2020-18280: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...
Phodal CMD 跨站脚本漏洞
Phodal CMD is a drop-in editor for the WeChat media platform by Fengda Huang, an individual developer in China. A security vulnerability exists in Phodal CMD version v.1.0, which stems from the presence of a cross-site scripting vulnerability that allows local attackers to execute arbitrary code...
UBUNTU-CVE-2022-25276
The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities...
Duplicate Advisory: AVideo contains Command injection when embedding a video link
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pgvh-p3g4-86jw. This link is maintained to preserve external references. Original Description Impact: An attacker could execute remote code on a system running wwbn/avideo Step to Reproduce: 1. Go to the My Vide...
CVE-2023-25313
OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature...
CVE-2023-25313
OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature...
CVE-2023-29196 HTML injection via topic embedding in Discourse
Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A custom feature must be enabled for it to work at all, and the attacker’s payload must pass the CSP to be executed. However, if an attacker succeeds in...
PT-2023-22195 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest tests-passed, beta and stable branches Description: This issue affects Discourse, an open source platform for community discussion. It is not exploitable on the default install of Discourse, requiring a...