Lucene search
+L

8 matches found

OSV
OSV
•added 2021/09/10 2:15 p.m.•14 views

CVE-2021-38338

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
Prion
Prion
•added 2021/09/10 2:15 p.m.•25 views

Cross site scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

4.3CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/10 12:00 a.m.•3 views

PT-2021-22057

Name of the Vulnerable Software and Affected Versions: Border Loading Bar WordPress plugin versions up to and including 1.0.1 Description: The issue allows attackers to inject arbitrary web scripts via Reflected Cross-Site Scripting, utilizing the f and t parameters found in the...

6.1CVSS0.00895EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/10 12:00 a.m.•6 views

CVE-2021-38338: Improper Neutralization of Input During Web Page Generation

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS5.7AI score0.00895EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•18 views

Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.8AI score0.00895EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2016/01/13 12:00 a.m.•15 views

WordPress Titan Framework Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on servers with PHP and MySQL.Titan Framework is one of the plug-ins for developers to create administrative pages. A cross-site scripting...

6.1CVSS6.3AI score0.01154EPSS
SaveExploits0References1
Mend
Mend
•added 2016/01/08 9:00 p.m.•2 views

CVE-2014-6444

Multiple cross-site scripting XSS vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to iframe-googlefont-preview.php or the 2 text parameter to iframe-font-preview.php...

6.1CVSS0.01154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/01/08 12:00 a.m.•3 views

PT-2016-3496

Name of the Vulnerable Software and Affected Versions Titan Framework plugin versions prior to 1.6 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabiliti...

6.1CVSS0.01154EPSS
SaveExploits0References4
Rows per page
Query Builder