Lucene search
K

6 matches found

securityvulns
securityvulns
added 2015/02/22 12:0 a.m.69 views

Multiple Cross site scripting in wordpress Plugin Image Metadata cruncher

Title:- XSS In Image-Metadata-Cruncher Author: Kaustubh G. Padwad Product: image-metadata-cruncher pluginURL:https://wordpress.org/plugins/image-metadata-cruncher/ Severity: Medium Auth: Requierd Description: Vulnerable Parameter: Alternate text: Caption: Custom image meta tags: Vulnerability...

6.4AI score
Exploits0
Prion
Prion
added 2015/02/19 3:59 p.m.21 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 imagemetadatacruncheralt or 2...

6.8CVSS6.9AI score0.0014EPSS
Exploits2References4
Cvelist
Cvelist
added 2015/02/19 3:0 p.m.23 views

CVE-2015-1614

Multiple cross-site request forgery CSRF vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 imagemetadatacruncheralt or 2...

6.6AI score0.0014EPSS
Exploits2References4
CVE
CVE
added 2015/02/19 3:0 p.m.56 views

CVE-2015-1614

CVE-2015-1614 pertains to the WordPress Image Metadata Cruncher plugin, which is reported to contain CSRF vulnerabilities that allow remote attackers to hijack an administrator’s authentication and trigger stored XSS via the plugin’s image_metadata_cruncher[alt], image_metadata_cruncher[caption],...

6.8CVSS6.6AI score0.0014EPSS
Exploits2References4Affected Software1
0day.today
0day.today
added 2015/02/18 12:0 a.m.60 views

WordPress Image Metadata Cruncher CSRF / XSS Vulnerabilities

WordPress Image Metadata Cruncher plugin suffers from cross site request forgery and stored cross site scripting vulnerabilities. Title: CSRF / Stored XSS Vulnerability in IMAGE-MEtadata-Cruncher Wordpress Plugin Author: Kaustubh G. Padwad CVE-ID : CVE-2015-1614 Plugin Homepage:...

6.8CVSS1.1AI score0.0014EPSS
Exploits2
Packet Storm
Packet Storm
added 2015/02/15 12:0 a.m.17 views

WordPress Image Metadata Cruncher Cross Site Scripting

Title:- XSS In Image-Metadata-Cruncher Author: Kaustubh G. Padwad Product: image-metadata-cruncher pluginURL:https://wordpress.org/plugins/image-metadata-cruncher/ Severity: Medium Auth: Requierd Description: Vulnerable Parameter: Alternate text: Caption: Custom image meta tags: Vulnerability...

0.6AI score
Exploits0
Rows per page
Query Builder