CVE-2009-10002 dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

CVE-2009-10002

The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...

CVE-2009-10002 dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

PT-2023-9870 · Unknown · Dpup Fittr-Flickr

Name of the Vulnerable Software and Affected Versions: dpup fittr-flickr affected versions not specified Description: A vulnerability has been found in dpup fittr-flickr, affecting some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The...

Fittr Flickr 跨站脚本漏洞

Fittr Flickr is a Chrome extension for the photo-sharing website Flickr. A cross-site scripting vulnerability exists in Fittr Flickr, which stems from some unknown handling of the file fittr-flickr/features/easy-exif.js in the component EXIF preview handler, which is manipulated to cause cross-si...

CVE-2009-10002: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

Flickr: Exceed photo dimensions, Flickr.com

Large negative numbers could be provided as a note's width and heigh which would be interpreted as positive integers and create notes beyond the normal size boundaries...

Flickr: IDOR may allow access to non-public photos

The IDOR vulnerability may have allowed access to non-public photos on Flickr. By adding discovered photo IDs for non-public photos uploaded by others to a Flickr group, the attacker could gain access to the third-party photos through their membership in the group...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Cross site scripting

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021

CVE-2022-3021 affects the Slickr Flickr WordPress plugin up to version 2.8.1. The vulnerability is a stored XSS caused by insufficient sanitization and escaping of plugin settings, exploitable by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Impact is cross-site scr...

CVE-2022-3021 Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-3021: Improper Neutralization of Input During Web Page Generation

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-20021 · WordPress · Slickr Flickr Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Slickr Flickr WordPress plugin versions through 2.8.1 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings. This can occur eve...

WordPress plugin Slickr Flickr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Open the plugin and intercept the request using burpsuite. Give the below payload in the parameter...

WordPress Slickr Flickr plugin <= 2.8.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Kishore Hariram in WordPress Slickr Flickr plugin versions = 2.8.1. Solution Deactivate and delete. This plugin has been closed as of August 25, 2022 and is not available for download. This closure is temporary, pending a...

Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Open the plugin and intercept the request using burpsuite. Give the below payload in the parameter...