12317 matches found
Cross site scripting
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
CVE-2019-14950
The wp-live-chat-support plugin for WordPress (versions prior to 8.0.27 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is insufficient sanitization of client-side data within the GDPR page , which allows an attacker to execute arbitrary scripts in the context of the victim's...
CVE-2017-18508
The wp-live-chat-support WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in all versions prior to 7.1.03. The issue stems from improper validation of client-side data, enabling an attacker to execute arbitrary script in a victim’s browser. Remediation: upgrade to version 7.1.03 or la...
CVE-2017-18508
The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...
CVE-2016-10879
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
CVE-2016-10879
CVE-2016-10879 concerns the WordPress plugin wp-live-chat-support prior to version 6.2.02, which is reported to be vulnerable to cross-site scripting (XSS). The available connected sources describe the issue as caused by a lack of proper validation of client-side data in the plugin, enabling pote...
CVE-2017-18508: Improper Neutralization of Input During Web Page Generation
The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...
PT-2019-7675 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 6.2.02 Description: The issue is related to a security problem where an attacker can execute malicious scripts. Recommendations: For versions prior to 6.2.02, update to version 6.2.02 or later to...
CVE-2016-10879: Improper Neutralization of Input During Web Page Generation
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...
CVE-2019-14950: Improper Neutralization of Input During Web Page Generation
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...
Oracle Linux 8 : pacemaker (ELSA-2019-1279)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1279 advisory. - Improve clients' authentication of IPC servers CVE-2018-16877 - Fix use-after-free with potential information disclosure CVE-2019-3885 - Improve...
PT-2019-13887 · WordPress · Wp-Live-Chat-Support
Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 8.0.27 Description: The issue is related to a security problem where an attacker can exploit the GDPR page to execute malicious scripts, potentially leading to unauthorized access or data theft...
penetration
This repository contains a collection of exploit code and proof-of-concept PoC attacks targeting various web applications, including CMS platforms. The exploits are categorized by the affected product or service, and the vulnerability class or vector is identified. The exploits are: 1. 0day &...
Product update: Virtuozzo 7.0 Update 11 (7.0.11-293)
The Update 11 for Virtuozzo 7.0 provides new features as well as stability and usability bug fixes. It also introduces a new kernel 3.10.0-957.12.2.vz7.96.21. Vulnerability id: PSBM-82223 Under certain circumstances, a VM with IDE disks could crash or corrupt guest data during migration or snapsh...
pacemaker security and bug fix update
2.0.1-4.3 - New build with fixed test in gating.yaml - Resolves: rhbz1694557 - Resolves: rhbz1695247 - Resolves: rhbz1697264 - Resolves: rhbz1697265 2.0.1-4.2 - New build to apply z-stream tag - Resolves: rhbz1694557 - Resolves: rhbz1695247 - Resolves: rhbz1697264 - Resolves: rhbz1697265 2.0.1-4....
CVE-2018-18570
Planon before Live Build 41 has XSS...
CVE-2018-18570
Planon before Live Build 41 has XSS...
Cross site scripting
Planon before Live Build 41 has XSS...
CVE-2018-18570
Planon before Live Build 41 is vulnerable to Cross-Site Scripting (XSS). The Nuclei template and related descriptions confirm an XSS flaw in Planon prior to Live Build 41, enabling an attacker to execute arbitrary scripts in a victim’s browser and potentially lead to session hijacking, defacement...