107 matches found
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...
PT-2021-21377 · Unknown · Wordpress Popup
Name of the Vulnerable Software and Affected Versions: WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 Description: The issue concerns the headline input, specifically at the &message data16headline variable. This input is vulnerable, potentially allowi...
CVE-2021-36832
WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram versions = 2.0.2 vulnerable at "Headline" data16headline input...
WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Icegram plugin versions = 2.0.2. Vulnerable at "Headline" &messagedata16headline input. Solution Update the WordPress Icegram plugin to the latest available version at least 2.0.3...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
UBUNTU-CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
Removed by vendor...
Wordpress plugin Controlled Admin Access 访问控制错误漏洞
WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in multiple Wordpress plugins that allows an attacker to use this endpoint to add arbitrary data to predefined options in the wpoptions table. The following products and versions are affected: The...
WordPress Thrive Headline Optimizer premium plugin <= 1.3.7.2 - Unauthenticated Option Update vulnerability
Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Headline Optimizer premium plugin versions = 1.3.7.2. Solution Update the WordPress Thrive Headline Optimizer premium plugin to the latest available version at least 1.3.7.3...
Guangdong New Express Media Development Co., Ltd.'s Guangdong Headline APP suffers from ultra vires access vulnerability
Guangdong Headline APP is a news and information software. Guangdong New Express Media Development Co. Guangdong Headline APP has an overstepping access vulnerability. An attacker can utilize the vulnerability to access other users' wallet information beyond their rights...
BTITeam XBTIT Cross-Site Scripting Vulnerability (CNVD-2019-28273)
XBTIT is an open source tracking software. A stored cross-site scripting vulnerability exists in newsfeed /index.php?page=viewnews in BTITeam XBTIT 2.5.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via the headline of a news item...
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject greater than characters via the id attribute of a headline...
Code injection
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject greater than characters via the id attribute of a headline...
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject greater than characters via the id attribute of a headline...
DEBIAN-CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject greater than characters via the id attribute of a headline...