Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

CVE-2015-3904

Multiple cross-site scripting XSS vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 pin, 2 startday, 3 startmonth, 4 startyear, 5 endday, 6 endmonth, 7 endyear, 8 lang, 9 adults, or 10 children...

CVE-2015-4063

Cross-site scripting XSS vulnerability in includes/nspsearch.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter in the nspsearch page to wp-admin/admin.php...

Feed to JavaScript 'magpie_debug.php' HTML Injection Vulnerability

Feed to JavaScript is a set of tools to output feed content in JS and embed it into a web page to make a list of articles. An HTML injection vulnerability exists in Feed to JavaScript, which can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1911

Cross-site scripting XSS vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales SFS 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-03343)

Google Chrome is a web browser developed by the American company Google Google. A cross-site scripting vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. This vulnerability allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themeseditor parameter in an addtemplate action to admin/index.php...

WordPress Add Link to Facebook Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. add Link to Facebook is one of the plugin to automatically add links to Facebook. An HTML injection vulnerability exists in the WordPress Add Link to...

WordPress Google Analytics by Yoast Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.Google Analytics by Yoast is one of the website analytics plugins. An HTML injection vulnerability exists in the WordPress Google Analytics by Yoast plugin, which allows remot...

Pligg CMS 'dmin_page.php' HTML Injection Vulnerability

Pligg CMS is a content management system. An input validation vulnerability exists in Pligg CMS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewe...

WordPress Content Slide Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Content Slide is one of the plugin used to create a fully customizable jquery Fading image slideshow . An HTML...

OpenStack Horizon Metadata Panel HTML Injection Vulnerability

Horizon is a web control panel for managing and controlling OpenStack services. An HTML injection vulnerability exists in the OpenStack Horizon metadata panel. Allowing an attacker to steal cookie-based authentication credentials and execute HTML or JavaScript code on an affected website...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...

CVE-2015-2250

Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...

CVE-2015-3989

CVE-2015-3989 describes multiple cross-site scripting (XSS) vulnerabilities in concrete5 prior to 5.7.4. The issues allow remote attackers to inject arbitrary web script or HTML via vectors including private messages or other unspecified paths. The consolidated sources state affected software is ...

Cross site scripting

Cross-site scripting XSS vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the TheCartPress eCommerce Shopping Cart aka The Professional WordPress eCommerce Plugin plugin for WordPress before 1.3.9.3 allow remote attackers to inject arbitrary web script or HTML via the 1 billingfirstname, 2 billinglastname, 3...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...