django-js-reverse cross-site scripting vulnerability

django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and the Node.js software platform. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting...

PT-2019-10429

Name of the Vulnerable Software and Affected Versions js-support-ticket plugin versions prior to 2.0.6 Description The issue affects the js-support-ticket plugin for WordPress, allowing for CSRF attacks. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the...

CVE-2018-21002: Cross-Site Request Forgery (CSRF)

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

Cross-site Scripting (XSS)

django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

Design/Logic Flaw

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PYSEC-2019-89

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PT-2019-14215

Name of the Vulnerable Software and Affected Versions django-js-reverse version 0.9.0 and earlier Description The issue is related to a security problem where an attacker can exploit the js reverse inline to perform a cross-site scripting XSS attack. Recommendations For django-js-reverse versions...

PT-2019-20170

Name of the Vulnerable Software and Affected Versions django-js-reverse versions prior to 0.9.1 Description The issue is related to a XSS vulnerability via the js reverse inline function. Recommendations For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue...

CVE-2019-15486: Improper Neutralization of Input During Web Page Generation

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, nginx servers, network programming tools like netty, Envoy, SwiftNIO, and Node.js software platforms. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...