21 matches found
MINI-RPG2-W5CX-H3PX
Bulletin has no description...
PT-2025-52025
Name of the Vulnerable Software and Affected Versions AncoraThemes Exit Game versions through 1.4.3 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusio...
WordPress plugin “Exit Game” has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
EUVD-2012-4374
Malware in sbrugna...
CVE-2024-11388
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
WordPress Dino Game plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Dino Game versions = 1.1.0...
CVE-2024-11388
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
WordPress plugin Dino Game has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-37335
Authenticated author+ Stored Cross-Site Scripting XSS vulnerability in WHA's Word Search Puzzles game plugin = 2.0.1 at WordPress...
Jenkins < 1.482, < 1.466.2 LTS Multiple Vulnerabilities - Linux
Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-3QXR-Q72Q-HMWP Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
Cross-site Scripting (XSS)
Overview org.jvnet.hudson.plugins:ci-game is a Jenkins Continuous Integration Game plugin Affected versions of this package are vulnerable to Cross-site Scripting XSS. An attacker can inject arbitrary web script or HTML by sending a crafted request. Details Cross-site scripting or XSS is a code...
Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
Cross site scripting
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2012-4441
CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
PT-2019-6777
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.482 Jenkins LTS versions prior to 1.466.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the CI game plugin, which can lead to Cross-site Scripting XSS attacks...
CVE-2012-4441: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...