PT-2019-11746 · Jenkins · Jenkins Mashup Portlets Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Mashup Portlets Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner on the Jenkins master, making them accessible to users with file system access. Recommendations...

WordPress Geo Mashup plugin <= 1.10.3 - Unspecified Cross-Site Scripting (XSS) vulnerability

Unspecified Cross-Site Scripting XSS vulnerability found in WordPress Geo Mashup plugin versions = 1.10.3. Solution Update the WordPress Geo Mashup plugin to the latest available version at least 1.10.4...

WordPress Geo Mashup Plugin Design Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform , the platform supports PHP and MySQL server set up a personal blog site . Geo Mashup is one of the plug-ins that can save the posts , pages and other location information and generate...

Geo Mashup <= 1.10.3 - Unspecified Cross-Site Scripting (XSS)

The Geo Mashup WordPress plugin was affected by an Unspecified Cross-Site Scripting XSS security vulnerability...

CVE-2018-14071

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

CVE-2018-14071

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

Input validation

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

CVE-2018-14071

The CVE-2018-14071 entry concerns the WordPress Geo Mashup plugin (versions prior to 1.10.4). The underlying issue is insufficient sanitization of post editor and other user input, which is the root cause of the vulnerability. Public references (NVD/CVE records) indicate a high to critical impact...

PT-2018-12322 · WordPress · Geo Mashup

Name of the Vulnerable Software and Affected Versions: Geo Mashup plugin versions prior to 1.10.4 Description: The issue is related to insufficient sanitization of user input, including post editor input. This could potentially lead to security issues, but specific details about exploitation or...

CVE-2015-7407

Cross-site request forgery CSRF vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-7400

The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service CPU consumption via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Xxe

The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service CPU consumption via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-7407

CVE-2015-7407 describes a CSRF vulnerability in IBM Mashups (Lotus Mashups within IBM Mashup Center 3.0.0.1) that could allow a remote attacker to hijack a user’s authentication for requests that insert XSS content. The connected IBM bulletin set confirms the vulnerability and lists remediation p...

CVE-2015-7400

The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service CPU consumption via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-7400

CVE-2015-7400 affects the Lotus Mashups component in IBM Mashup Center 3.0.0.1, causing a denial of service via XML External Entity (XXE) processing when handling XML data. The issue is exploitable by remote authenticated users and is tied to XXE. IBM BPM/Cloud Orchestrator bulletins indicate thi...

CVE-2015-7407

Cross-site request forgery CSRF vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-1383

Cross-site scripting XSS vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key...

Cross site scripting

Cross-site scripting XSS vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key...

CVE-2015-1383

CVE-2015-1383 concerns the WordPress Geo Mashup plugin (versions prior to 1.8.3). The vulnerability is a Cross‑Site Scripting (XSS) flaw in the plugin’s geo search widget, where the input from the user’s search key is not properly sanitized, allowing an attacker to inject arbitrary scripts into t...