CVE-2024-24870

The CVE-2024-24870 entry describes a Stored XSS in the WordPress Advanced iFrame plugin (≤ 2023.10) due to Improper Neutralization of Input During Web Page Generation. Affected component: Advanced iFrame plugin; root cause: insufficient input sanitization/escaping in the advanced_iframe context. ...

CVE-2024-24870 WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2023.10...

CVE-2007-5457

CVE-2007-5457: Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 is affected by multiple PHP remote file inclusion vulnerabilities. The root cause is improper handling of the mosConfig_absolute_path parameter, enabling an attacker to specify a URL to install.joomla_flash_uploader...