21 matches found
EUVD-2018-3594
Malware in sbrugna...
EUVD-2024-45905
Malicious code in bioql PyPI...
CVE-2018-11568
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have representations...
CVE-2024-52418
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through = 1.5.10...
CVE-2024-52418
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through = 1.5.10...
CVE-2024-52418 WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through = 1.5.10...
CVE-2024-52418 WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through = 1.5.10...
CVE-2024-52418
CVE-2024-52418 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress theme/Gameplan by CactusThemes, affecting versions up to 1.5.10. The issue arises from improper neutralization of user input during web page generation, enabling an attacker to cause Reflected XSS in the victi...
PT-2024-35258 · Cactusthemes · Cactusthemes Gameplan
Name of the Vulnerable Software and Affected Versions: CactusThemes Gameplan versions 1.5.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...
WordPress plugin Gameplan 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme Gameplan versions = 1.5.10...
WordPress Gameplan Theme <= 1.5.10 is vulnerable to Cross Site Scripting (XSS)
Software Gameplan Type Theme Vulnerable versions = 1.5.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52418 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7409a8ffcf90 Credits justakazh Required privilege...
Clever Tool Uses Apple’s Videogame Logic Engine to Protect Macs
A new Mac security service called GamePlan uses a system's own indicators, and some videogame magic, to keep a lookout...
GamePlan theme for WordPress cross-site scripting vulnerability
GamePlan theme for WordPress is a WordPress based theme plugin for creating fitness based websites. A cross-site scripting vulnerability exists in GamePlan theme for WordPress 1.5.13.2 and prior versions that stems from the program failing to adequately validate input. A remote attacker can explo...
CVE-2018-11568
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have and representations...
Input validation
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have and representations...
CVE-2018-11568
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have and representations...
CVE-2018-11568
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have and representations...
CVE-2018-11568
CVE-2018-11568 affects the GamePlan WordPress theme up to version 1.5.13.2. The vulnerability is a reflected XSS due to insufficient input sanitization in the s parameter; in some cases, are represented as HTML entities. Exploitation details are not provided in the connected documents, and a pat...
WordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting
Exploit Title: GamePlan Event and Gym Fitness WordPress Theme - Reflected XSS v1.0 - v1.5.13.2 Date: August 4, 2017 Software Link: https://www.cactusthemes.com/wp/gameplan/secondary Exploit Author: Kushal Jaisingh Contact: https://ca.linkedin.com/in/kushaljaisingh Category: WebApps, XSS 1...