27 matches found
CVE-2017-18610
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
CVE-2017-18609
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
EUVD-2017-9722
Malware in sbrugna...
EUVD-2017-9723
Malware in sbrugna...
EUVD-2017-9724
Malware in sbrugna...
CVE-2017-18611
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...
WordPress magic-fields plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32372)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress magic-fields plugin cross-site scripting vulnerability (CNVD-2019-32383)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. magic-fields is a web form field customization plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2017-18609
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
CVE-2017-18611
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...
CVE-2017-18610
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
Design/Logic Flaw
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
CVE-2017-18610
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
CVE-2017-18610
The CVE-2017-18610 issue affects the WordPress plugin “magic-fields” (before 1.7.2). The vulnerability is an XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter, as reported across multiple sources (Red Hat, CNVD, NVD mirrors, OSV, CVE lists). Impact described in sources is clie...
CVE-2017-18609
The CVE-2017-18609 entry concerns the WordPress plugin magic-fields, specifically versions before 1.7.2, which is vulnerable to cross-site scripting via the custom-write-panel-id parameter. Affected component: magic-fields plugin for WordPress. Root cause: XSS vulnerability in handling the custom...
PT-2019-8542
Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a cross-site scripting XSS flaw. It is located in the RCCWP CreateCustomFieldPage.php file and is related to the custom-field-css parameter. This parameter is vulnerabl...
PT-2019-8540
Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the custom-write-panel-id parameter. Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later ...
PT-2019-8541
Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a Cross-Site Scripting XSS vulnerability. It affects the magic-fields plugin for WordPress, specifically through the custom-group-id parameter in the RCCWP...
CVE-2017-18611: Improper Neutralization of Input During Web Page Generation
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...