CVE-2019-19134

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of ...

CVE-2019-19134

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of ...

CVE-2019-19134

The CVE-2019-19134 entry concerns WordPress Hero Maps Premium plugin (versions ≤ 2.2.1) with an unauthenticated XSS via views/dashboard/index.php p parameter. The issue arises from insufficient input sanitization, enabling injection of HTML/JavaScript in a user’s browser and potentially cookie th...

Hero Maps Premium < 2.2.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hmapsprem WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Hero Maps Premium plugin <= 2.2.1 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability discovered by Hooper Labs in WordPress Hero Maps Premium plugin versions = 2.2.1. Solution Update the WordPress Hero Maps Premium plugin to the latest available version at least 2.2.3...

Input validation

The CSS Hero plugin through 4.0.3 for WordPress is prone to reflected XSS via the URI in a cssheroaction=editpage request because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary JavaScript in the browser of an unsuspecting user in th...

CVE-2019-19133

The CSS Hero plugin through 4.0.3 for WordPress is prone to reflected XSS via the URI in a cssheroaction=editpage request because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary JavaScript in the browser of an unsuspecting user in th...

CVE-2019-19133

The CVE covers a reflected XSS in the WordPress CSS Hero plugin up to version 4.0.3, caused by insufficient sanitization of user input in the URI when csshero_action=edit_page is used. An authenticated attacker could trigger arbitrary JavaScript in the victim’s browser on the affected site, poten...

WordPress CSS Hero 4.0.3 Cross Site Scripting

Team, Document Title =============== CVE-2019-19133 Reflected XSS in CSS Hero = v.4.0.3 WordPress plugin. Product Description =============== CSS Hero WordPress Plugin A live WordPress Theme editor that works without modifying any of your theme files. Very low performance footprint: only generate...

WordPress CSS Hero plugin <= 4.03 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability found by Cary Hooper in WordPress CSS Hero plugin versions = 4.03. Solution Update the WordPress CSS Hero plugin to the latest available version at least 4.07...

CSS Hero < 4.07 - Authenticated Reflected XSS

The css-hero WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability...

WannaCry hero MalwareTech pleads guilty to writing banking malware

By Ryan De Souza MalwareTech is now facing 10 years in prison. In 2017, Marcus Hutchin who goes by the Twitter handle of MalwareTech halted the infamous WannaCry ransomware after registering its killswitch domain. As a result, Hutchin was hailed as WannaCry hero but in August the same year,...

WannaCry hero charged with creating Kronos banking malware

By Waqas The 23-year-old cybersecurity expert, Marcus Hutchins @Malwaretech on Twitter, who This is a post from HackRead.com Read the original post: WannaCry hero charged with creating Kronos banking malware...

illinois-hero-program.com XSS vulnerability

Open Bug Bounty ID: OBB-588711 Description| Value ---|--- Affected Website:| illinois-hero-program.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hero-shop.ir XSS vulnerability

Open Bug Bounty ID: OBB-411495 Description| Value ---|--- Affected Website:| hero-shop.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

British Intelligence Knew WannaCry Hero Would be Arrested by FBI

By Waqas By now you might be aware of Marcus Hutchins, the This is a post from HackRead.com Read the original post: British Intelligence Knew WannaCry Hero Would be Arrested by FBI...

WannaCry hero back on Twitter after pleading not guilting over Kronos

By Waqas He is not allowed to access the Kill Switch he This is a post from HackRead.com Read the original post: WannaCry hero back on Twitter after pleading not guilting over Kronos...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

August 8, 2017 – Morning Cyber Coffee Headlines – “Smokey the Bear” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 8, 2017 - Headlines NetWorks Group Joins “Carbon Black Connect” Partner...

WannaCry hero gets bail; pleading not guilty over Kronos malware

By Waqas As you might know, 23-year-old Marcus Hutchins @MalwareTechBlog on Twitter This is a post from HackRead.com Read the original post: WannaCry hero gets bail; pleading not guilty over Kronos malware...