CVE-2020-12696

The iframe plugin before 4.5 for WordPress does not sanitize a URL...

CVE-2020-12696

The iframe plugin before 4.5 for WordPress does not sanitize a URL...

Design/Logic Flaw

The iframe plugin before 4.5 for WordPress does not sanitize a URL...

CVE-2020-12696

CVE-2020-12696 affects the WordPress iframe plugin (versions before 4.5). The issue is that the plugin does not sanitize user-supplied URLs in the iframe, enabling a potential cross-site scripting (XSS) vector. Multiple sources cite this as an authenticated stored XSS vulnerability, with remediat...

CVE-2020-12696

The iframe plugin before 4.5 for WordPress does not sanitize a URL...

WordPress iframe plugin <= 4.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Guilherme Rubert in WordPress iframe plugin versions = 4.4. Solution Update the WordPress iframe plugin to the latest available version at least 4.5...

Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)

The iframe plugin before 4.5 does not sanitize a URL. PoC iframe src="javascript:alertdocument.cookie" width="100%" height="500"...

Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)

The iframe plugin before 4.5 does not sanitize a URL. iframe src="javascript:alertdocument.cookie" width="100%" height="500"...

priceelf.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1155528 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting priceelf.com website a...

informatief.financieeldossier.nl IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1152215 Security Researcher nullsc Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges Received 1 recommendations , found a security vulnerability affecting informatief.financieeldossier.nl website and its users. Following coordinated and responsible...

movie2.elpn.net IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1146513 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting movie2.elpn.net website and its users. Following...

metatraderdemo.net IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1146257 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting metatraderdemo.net website and its users. Following...

55444.ir IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1145663 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting 55444.ir website and its users. Following coordinate...

33222.ir IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1145662 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting 33222.ir website and its users. Following coordinate...

eunis.eea.europa.eu IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1145007 Security Researcher MajorInfluenza Helped patch 120 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting eunis.eea.europa.eu website and its users...

g2b.go.kr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1141539 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting g2b.go.kr website and its...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to denial of service DoS. A flaw was found in the way Thunderbird handled the HTML iframe tag. An HTML mail message with an iframe tag containing a specially-crafted source address could trigger this flaw, possibly leading to arbitrary code execution with the...

Information Disclosure

seamonkey is vulnerable to information disclosure. The scriptable plugin content allows remote attackers to obtain confidential information via malicious content in an IFRAME element in an HTML email message...

petroleyatirim.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1136152 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Information Disclosure

cross-domain-local-storage-separately is vulnerable to information disclosure. The buildMessage function in xdLocalStorage.js allows the wildcard as the targetOrigin when calling the postMessage function on the iframe object, allowing any domains with iframe to accept requests from clients...