CVE-2018-21002

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

Cross site request forgery (csrf)

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

CVE-2018-21002

The CVE-2018-21002 entry affects the WordPress plugin js-support-ticket prior to version 2.0.6, which is vulnerable to Cross-Site Request Forgery (CSRF). The issue is caused by CSRF in the plugin’s handling of requests, enabling unintended state-changing actions on affected sites. NVD lists CVSS ...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and the Node.js software platform. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting...

django-js-reverse cross-site scripting vulnerability

django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...

Cross-site Scripting (XSS)

django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PYSEC-2019-89

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

Design/Logic Flaw

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, nginx servers, network programming tools like netty, Envoy, SwiftNIO, and Node.js software platforms. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...

WordPress js-jobs plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. js-jobs is a recruitment/job search plugin used in it. WordPress js-jobs plugin has a cross-site request forgery vulnerability. Th...

CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

Cross site request forgery (csrf)

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974

CVE-2018-20974 affects the WordPress plugin js-jobs (JS Job Manager) prior to version 1.0.7. The root cause is CSRF due to insufficient verification of trusted-user requests, enabling forgery of cross-site actions. Impact details are limited to what is stated in the sources (CSRF with potential f...