20 matches found
EUVD-2014-1312
Malware in sbrugna...
EUVD-2025-10603
Malicious code in bioql PyPI...
CVE-2025-32610
Cross-Site Request Forgery CSRF vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through = 2.6.18...
CVE-2025-32610
Cross-Site Request Forgery CSRF vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through = 2.6.18...
CVE-2025-32610
CVE-2025-32610 affects Foliopress WYSIWYG in FolioPress WYSIWYG (up to 2.6.18); described as CSRF leading to stored XSS. Public documentation shows a base CVSS v3.1 score of 7.1 (HIGH) with network attack vector, no privileges, and user interaction required. Connected sources indicate the patch s...
CVE-2025-32610 WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through = 2.6.18...
CVE-2025-32610 WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Foliovision: Making the web work for you Foliopress WYSIWYG allows Cross Site Request Forgery. This issue affects Foliopress WYSIWYG: from n/a through 2.6.18...
WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Foliopress WYSIWYG versions = 2.6.18...
PT-2025-15800 · Foliopress · Foliopress Wysiwyg
Name of the Vulnerable Software and Affected Versions: Foliopress WYSIWYG versions n/a through 2.6.18 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows unauthorized actions to be performed on a user's account without their knowledge or consent. This is due to...
WordPress plugin Foliopress WYSIWYG 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2025-32610: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through = 2.6.18...
Foliopress WYSIWYG - Unspecified XSS
The Foliopress WYSIWYG WordPress plugin was affected by an Unspecified XSS security vulnerability...
CVE-2014-1232
Cross-site scripting XSS vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1232
Cross-site scripting XSS vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-1232
The CVE-2014-1232 vulnerability affects the Foliopress WYSIWYG WordPress plugin, specifically versions before 2.6.8.5. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Multiple sources confirm the issue across NVD and...
CVE-2014-1232: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
WordPress Foliopress WYSIWYG Plugin <= 2.6.8.4 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...
PT-2014-4024
Name of the Vulnerable Software and Affected Versions Foliopress WYSIWYG plugin versions prior to 2.6.8.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.6.8.5, update to version 2.6.8.5 or later ...
WordPress Foliopress WYSIWYG插件跨站脚本漏洞
WordPress是一款内容管理系统。 由于某些未明输入在返回用户前未能正确过滤,攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 WordPress Foliopress WYSIWYG Plugin 2.x 厂商补丁: WordPress ----- WordPress Foliopress WYSIWYG插件2.6.8.5版本以修复此漏洞,建议用户下载使用: http://wordpress.org/plugins/foliopress-wysiwyg/changelog/...