WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)

Description WordPress does not escape a user login value in all cases before outputting it on a multisite network administration screen, which could allow Stored Cross-Site Scripting where that value was populated by a means that bypasses the normal username sanitisation. This is a defence-in-dep...

EUVD-2006-1116

Malware in sbrugna...

CVE-2006-1112

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...