Lucene search
+L

97 matches found

Github Security Blog
Github Security Blog
•added 2018/10/19 4:46 p.m.•41 views

Stored Cross Site Scripting in Grails Fields Plugin

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in using the display tag that can result in XSS. This vulnerability has been fixed in version 2.2.8...

6.1CVSS6AI score0.01156EPSS
SaveExploits2References4Affected Software2
CNVD
CNVD
•added 2018/07/09 12:00 a.m.•17 views

Grails Fields Plugin Cross-Site Scripting Vulnerability

Grails Fields plugin is a field property definition plugin . A cross-site scripting vulnerability exists in the use of display tags in Grails Fields plugin version 2.2.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

6.1CVSS6AI score0.01156EPSS
SaveExploits2References1
OSV
OSV
•added 2018/06/26 4:29 p.m.•32 views

CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

6.1CVSS5.9AI score0.01156EPSS
SaveExploits2References2
NVD
NVD
•added 2018/06/26 4:29 p.m.•34 views

CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

6.1CVSS5.9AI score0.01156EPSS
SaveExploits2References2
Prion
Prion
•added 2018/06/26 4:29 p.m.•29 views

Cross site scripting

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

4.3CVSS5.8AI score0.01156EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2018/06/26 4:00 p.m.•47 views

CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

5.9AI score0.01156EPSS
SaveExploits2References2
CVE
CVE
•added 2018/06/26 4:00 p.m.•96 views

CVE-2018-1000529

CVE-2018-1000529 concerns the Grails Fields plugin (version 2.2.7) and its use of display tags, where an XSS vulnerability could be triggered. The connected advisories confirm the issue and state that it has been fixed in version 2.2.8 . The available documents describe the affected component (or...

6.1CVSS5.8AI score0.01156EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2018/06/26 4:00 p.m.•1 views

CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

6.1CVSS0.01156EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/26 12:00 a.m.•8 views

CVE-2018-1000529: Improper Neutralization of Input During Web Page Generation

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8...

6.1CVSS6.3AI score0.01156EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/06/26 12:00 a.m.•1 views

PT-2018-9426

Name of the Vulnerable Software and Affected Versions Grails Fields plugin versions prior to 2.2.8 Description The issue is related to a Cross Site Scripting XSS vulnerability in the display tag of the Grails Fields plugin. This can result in XSS attacks. Recommendations For versions prior to...

6.1CVSS0.01156EPSS
SaveExploits2References7
Snyk
Snyk
•added 2018/05/22 3:59 p.m.•4 views

Cross-site Scripting (XSS)

Overview org.grails.plugins:fields is a customizable form-field rendering based on overrideable GSP template. Affected versions of this package are vulnerable to Cross-site Scripting XSS. Domain objects being displayed by tags of the plugin containing HTML or JavaScript code are not being encoded...

6.1CVSS5.3AI score0.01156EPSS
SaveExploits2References2
GithubExploit
GithubExploit
•added 2018/05/21 11:43 p.m.•5 views

Exploit for Cross-site Scripting in Grails Grails_Fields

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/v...

6.1CVSS0.01156EPSS
SaveExploits2
Patchstack
Patchstack
•added 2016/02/29 12:00 a.m.•16 views

WordPress More Fields Plugin 2.1 - CSRF

This vulnerability is disabled for all functions add box and delete box options. Because of that, an attacker can add or delete extra fields in additional boxes on the edit page in the Admin. Solution Upgrade the plugin...

2.4AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/08/25 12:00 a.m.•26 views

WordPress Simple Fields Plugin <= 1.4.10 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.4AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2014/08/01 12:00 a.m.•12 views

WordPress Simple Fields Plugin 0.3.5 - Remote File Inclusion

This plugin is prone to a remote file inclusion vulnerability. Solution Update the plugin...

3.4AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2014/08/01 12:00 a.m.•17 views

WordPress Simple Fields Plugin <= 1.1.6 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability via admin functions. Solution Update the plugin...

3.7AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2014/08/01 12:00 a.m.•18 views

WordPress Simple Fields Plugin 1.1.6 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

2.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder