Cross site scripting

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

CVE-2020-24897

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

CVE-2020-24897: Improper Neutralization of Input During Web Page Generation

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

PT-2020-15853

Name of the Vulnerable Software and Affected Versions Table Filter and Charts for Confluence Server versions prior to 5.3.26 Description The issue allows for Server-Side Request Forgery SSRF via the "Table from CSV" macro, specifically through a URL parameter. Recommendations For versions prior t...

CVE-2020-24898: Server-Side Request Forgery (SSRF)

The Table Filter and Charts for Confluence Server app before 5.3.26 for Atlassian Confluence allows SSRF via the "Table from CSV" macro URL parameter...

PT-2020-15852

Name of the Vulnerable Software and Affected Versions Table Filter and Charts for Confluence Server versions prior to 5.3.25 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CS...

CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

Cross site scripting

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

Cross site request forgery (csrf)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

CVE-2019-15326

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

CVE-2019-15327

The CVE-2019-15327 vulnerability affects the WordPress plugin import-users-from-csv-with-meta (pre-1.14.1.3). The issue is an XSS via data imported into the plugin. Public documents indicate a fix in version 1.14.1.3 (VendorFix). The vulnerability is documented across multiple sources (NVD, Red H...

CVE-2019-15327

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...

CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

CVE-2019-15329

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

CVE-2019-15329: Cross-Site Request Forgery (CSRF)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

PT-2019-14057

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a Cross-Site Scripting XSS problem. Recommendations For versions prior to 1.14.0.3, update to version 1.14.0.3 or later to resolve the...

CVE-2019-15326: Improper Limitation of a Pathname to a Restricted Directory

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

CVE-2019-15327: Improper Neutralization of Input During Web Page Generation

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...

PT-2019-14055

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.2.1 Description The issue allows for directory traversal. Recommendations For versions prior to 1.14.2.1, update to version 1.14.2.1 or later to resolve the issue...

PT-2019-14056

Name of the Vulnerable Software and Affected Versions import-users-from-csv-with-meta plugin versions prior to 1.14.1.3 Description The issue concerns a problem where imported data can lead to XSS. Recommendations For versions prior to 1.14.1.3, update to version 1.14.1.3 or later to resolve the...