EUVD-2012-5458

Malware in sbrugna...

PT-2024-16547 · WordPress · The Activity Log – Monitor & Record User Changes

Name of the Vulnerable Software and Affected Versions: The Activity Log – Monitor & Record User Changes plugin for WordPress versions up to, and including, 2.11.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...

CVE-2024-10788: Improper Neutralization of Input During Web Page Generation

The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event parameters in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2013-0203

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 unspecified parameters to apps/calendar/ajax/event/new.php or 2 url parameter to apps/bookmarks/ajax/addBookmark.php...