1488 matches found
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-70737)
WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress' Keyword Meta plugin version 3.0 and earlier is vulnerable to a cross-site scripting...
CVE-2021-24611
The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furthermore, it is also lacking any CSRF check, allowing attacker to make a logged in high privilege user...
CVE-2021-24611
The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furthermore, it is also lacking any CSRF check, allowing attacker to make a logged in high privilege user...
CVE-2021-24611
The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furthermore, it is also lacking any CSRF check, allowing attacker to make a logged in high privilege user...
CVE-2021-24611: Cross-Site Request Forgery (CSRF)
The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furthermore, it is also lacking any CSRF check, allowing attacker to make a logged in high privilege user...
WordPress 插件跨站脚本漏洞
WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress' Keyword Meta plugin version 3.0 and earlier is vulnerable to a cross-site scripting...
PT-2021-16127
Name of the Vulnerable Software and Affected Versions Keyword Meta WordPress plugin versions 3.0 and earlier Description The issue arises from the plugin's failure to sanitise or escape its settings before outputting them, leading to Cross-Site Scripting issues. Additionally, the lack of a CSRF...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20344
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Connected documents confirm the issue across multiple databases, but do not provide concrete exploit details, affected versions beyond the stated 1.0, or a...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
CVE-2020-20344: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
PT-2021-10480
Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a reflective cross-site scripting XSS vulnerability. This vulnerability is located in the keyword search function under the background articles module. Recommendations: For WTCMS version...
PT-2021-20006
Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description A Blind SQL injection issue exists due to improper validation of the user-controlled value supplied through the keyword parameter in the "/DataHandler/Handler CFG.ashx" endpoint...