WordPress Easy Social Feed Free plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy Social Feed Free plugin is vulnerable to a cross-site scripting vulnerability that stems from...

What's New in InsightVM and Nexpose: Q1 2022 in Review

The world of cybersecurity never has a dull moment. While we are still recovering from the aftermath of Log4Shell, the recent ContiLeaks exposed multiple vulnerabilities that have been exploited by the Conti ransomware group. It’s critical for your team to identify the risk posed by such...

CVE-2021-25120

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25120

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25120

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues...

Cross site scripting

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25120 Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25120

The CVE-2021-25120 affects the WordPress plugins Easy Social Feed Free/Pro prior to version 6.2.7. Affected component: parameters used via AJAX actions that are not sanitized before being reflected in responses, enabling a reflected Cross-Site Scripting (XSS) condition. The issue can execute Java...

WordPress plugins Easy Social Feed Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy Social Feed Free plugin is vulnerable to a cross-site scripting vulnerability that stems from...

CVE-2022-23176

creationtimestamp| type| source ---|---|--- 2022-04-14 17:10:02+00:00| exploited| https://t.me/itsecnews/488 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971508 2025-01-30 02:17:49+00:00|...

CVE-2022-24521

creationtimestamp| type| source ---|---|--- 2022-04-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=784 2022-04-13 08:18:48+00:00| seen| https://t.me/itsecnews/474 2022-04-13 16:05:03+00:00| exploited| https://t.me/truesecator/2844 2022-04-14 13:46:52+00:00| exploited|...

CVE-2022-22639

creationtimestamp| type| source ---|---|--- 2022-04-05 04:21:59+00:00| published-proof-of-concept| https://t.me/ctinow/49692 2022-04-05 05:18:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1855 2022-04-10 23:31:05+00:00| published-proof-of-concept|...

Event List < 0.8.8 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks against other admin even when the unfilteredhtml is disallowed Put the following payload in the "iCal link text" Feed Settings of the plugin...

PT-2022-17969 · Unknown · Php-Memcached

Name of the Vulnerable Software and Affected Versions: PHP-Memcached versions 2.2.0 and below Description: The issue is related to an improper NULL termination, which allows attackers to execute CLRF injection. This could potentially lead to security breaches. Note that there is a dispute regardi...

CVE-2022-22674

creationtimestamp| type| source ---|---|--- 2022-04-01 07:45:33+00:00| seen| https://t.me/cKure/9241 2022-04-01 12:00:50+00:00| seen| https://t.me/itsecnews/415 2022-04-01 13:50:00+00:00| exploited| https://t.me/truesecator/2797 2022-04-01 20:38:56+00:00| exploited| https://t.me/NeKaspersky/2066...

CVE-2022-26948

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 6.9.1.0 is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks...

CVE-2022-26948

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 6.9.1.0 is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks...

CVE-2022-26948

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 6.9.1.0 is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks...

Design/Logic Flaw

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 6.9.1.0 is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks...

CVE-2022-26871

creationtimestamp| type| source ---|---|--- 2022-03-30 00:11:34+00:00| seen| https://t.me/cibsecurity/39779 2022-04-02 13:08:07+00:00| seen| https://t.me/cKure/9249 2022-04-04 14:40:00+00:00| exploited| https://t.me/truesecator/2803 2022-04-04 20:09:03+00:00| seen|...