GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. PoC grwebform center='on'...

GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. grwebform center='on'...

SUSE CVE-2015-0828

Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted JavaScript code that makes an...

WordPress GetResponse for WordPress Plugin <= 5.5.31 is vulnerable to Cross Site Scripting (XSS)

Software GetResponse for WordPress Type Plugin Vulnerable versions = 5.5.31 Fixed in 5.5.32 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6a0becd92da1 Credits Unknown Required...

CVE-2022-35277

Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...

CVE-2022-35277

Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...

CVE-2022-35277

CVE-2022-35277 affects the WordPress GetResponse plugin, version

CVE-2022-35277 WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in GetResponse plugin = 5.5.20 at WordPress...

WordPress plugin GetResponse 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2022-22679 · WordPress · Getresponse

Name of the Vulnerable Software and Affected Versions: GetResponse plugin versions = 5.5.20 at WordPress. Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

GetResponse < 5.5.21 - API Key Update via CSRF

The plugin does not have CSRF check when updating the API key, which could allow attackers to make logged admins update it via a CSRF attack...

WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability leading to API Key Update

Cross-Site Request Forgery CSRF vulnerability leading to API Key Update discovered by Rasi Afeef Patchstack Alliance in WordPress GetResponse plugin versions = 5.5.20. Solution Update the WordPress GetResponse for WordPress plugin to the latest available version at least 5.5.21...

CS Money: Html injection on subscription email

Vulnerability description not provided...

Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner

Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...

getresponse.com XSS vulnerability

Open Bug Bounty ID: OBB-670862 Description| Value ---|--- Affected Website:| getresponse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.getresponse.com XSS vulnerability

Open Bug Bounty ID: OBB-583473 Description| Value ---|--- Affected Website:| support.getresponse.com Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on...

getresponse.com XSS vulnerability

Open Bug Bounty ID: OBB-453992 Description| Value ---|--- Affected Website:| getresponse.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

getresponse.com XSS vulnerability

Open Bug Bounty ID: OBB-449028 Description| Value ---|--- Affected Website:| getresponse.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

getresponse.com XSS vulnerability

Open Bug Bounty ID: OBB-359432 Description| Value ---|--- Affected Website:| getresponse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...