EUVD-2020-7360

Malware in sbrugna...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

WordPress Nexos theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress Nexos...

WordPress Nexos theme SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. WordPress Nexos theme has a SQL injection vulnerability. The...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

Cross site scripting

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

Sql injection

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15363

The Nexos Real Estate WordPress theme (v1.7) is affected by SQL Injection via the search_order parameter in top-map/ side-map queries. Descriptions and multiple sources (DSquare E-712, Exploit-DB/PacketStorm references) confirm an unauthenticated SQLi vulnerability associated with Nexos Real Esta...

CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

CVE-2020-15364

The CVE-2020-15364 entry corresponds to the Nexos Real Estate WordPress Theme (up to v1.7). Connected sources confirm concrete details: vulnerable components are the frontend endpoints top-map/?search_location= (reflected XSS) and side-map/?search_order= (SQL Injection). Attacker could trigger un...

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...