[SECURITY] Fedora 31 Update: drupal7-ckeditor-1.19-1.fc31

This module will allow Drupal to replace textarea fields with the CKEditor - a visual HTML editor 1, usually called a WYSIWYG editor. This HTML text edi tor brings many of the powerful WYSIWYG editing functions of known desktop edit ors like Word to the web. It's very fast and doesn't require any...

Cross-Site Scripting (XSS)

moodle/moodle is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the introeditortext parameter or the TinyMCE HTML editor...

Progress Telerik UI for ASP.NET AJAX Code Issue Vulnerability

Progress Telerik UI for ASP.NET AJAX is an HTML editor. A code issue vulnerability exists in Progress Telerik UI for ASP.NET AJAX 2019.3.1023 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No...

PT-2019-13973 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: The issue allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages when an attacker has login access to the admin panel. Recommendations: For OpenCart versio...

PT-2019-5915

Name of the Vulnerable Software and Affected Versions Adobe Dreamweaver versions 19.0 and earlier Description The issue is related to an insecure protocol implementation and insufficient input validation in the HTML editor. This could allow a remote attacker to disclose protected information,...

Cross-Site Scripting (XSS)

DotNetNuke.Web is vulnerable to cross-site scripting. The Telerik HTML editor allows remote attackers to inject arbitrary Javascript into a victim's browser to steal session cookies and perform unwanted actions on behalf of the user...

WordPress BBE theme <= 1.52 - Direct Object Reference vulnerability

Direct Object Reference vulnerability found by Zhihua Yao in WordPress BBE theme versions = 1.52. The vulnerability allows a direct launch of an HTML editor. Solution Update the WordPress BBE theme to the latest available version at least 1.53...

BBE theme for WordPress HTML editor vulnerability

BBE theme for WordPress is a theme plugin for the WordPress platform. A security vulnerability exists in BBE theme for WordPress versions prior to 1.53. An attacker can exploit the vulnerability to launch the HTML editor directly...

CVE-2018-11244

The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor...

CVE-2018-11244

The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor...

Hardcoded credentials

The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor...

CVE-2018-11244

The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor...

CVE-2018-11244

The CVE-2018-11244 entry concerns the WordPress BBE theme prior to version 1.53. Multiple sources describe a Direct Object Reference vulnerability that allows direct launching of the HTML editor, implying that an attacker could indirectly trigger the HTML editor through the theme. Affected softwa...

PT-2018-10422

Name of the Vulnerable Software and Affected Versions BBE theme versions prior to 1.53 Description The issue allows for a direct launch of an HTML editor, potentially leading to unauthorized access or modifications. Recommendations For versions prior to 1.53, update to version 1.53 or later to...

CVE-2018-11244: Undefined Security Weakness

The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor...

PT-2018-1330

Name of the Vulnerable Software and Affected Versions Adobe Dreamweaver CC versions 18.0 and earlier Description The issue is related to an OS Command Injection vulnerability in the HTML editor of Adobe Dreamweaver CC, which is caused by the failure to neutralize special elements used in operatin...

PT-2018-17863

Name of the Vulnerable Software and Affected Versions Gleez CMS versions 1.2.0 through 2.0 Description The issue is related to a cross-site scripting XSS vulnerability that could allow remote attackers to inject JavaScript via HTML content in an editor. This results in Stored XSS when an...

WYSIWYG HTML Editor PRO 1.0 - Arbitrary File Download

WYSIWYG HTML Editor PRO 1.0 - Arbitrary File Download Exploit Title: WYSIWYG HTML Editor PRO 1.0 - Arbitrary File Download Dork: N/A Date: 28.08.2017 Vendor Homepage: http://nelliwinne.net/ Software Link:...

Polycom VVX Web Interface Privilege Escalation

Exploit Title: Polycom VVX Web Interface - Change Admin Password as User Date: January 26, 2017 Exploit Author: Mike Brown Vendor Homepage: http://www.polycom.com/ Software Link: http://downloads.polycom.com/voice/voip/ucswreleasesmatrix.html Version: Polycom vvx 410 UC Software Version: 5.3.1.04...

Polycom VVX Web Interface - Change Admin Password

Polycom VVX Web Interface - Change Admin Password Exploit Title: Polycom VVX Web Interface - Change Admin Password as User Date: January 26, 2017 Exploit Author: Mike Brown Vendor Homepage: http://www.polycom.com/ Software Link: http://downloads.polycom.com/voice/voip/ucswreleasesmatrix.html...