CVE-2019-11318

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CarSpot < 2.2.3 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'CarSpot – Dealership Wordpress Classified Theme', tested version — v2.2.0: - Authenticated Persistent XSS - Registration Form/User Profile - Authenticated Persistent XSS - Ad Post - IDOR leading to arbitrary deletion of ads Edit WPScanTeam: January...

PT-2020-9188

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.8.12 Patch 1 Description The issue is related to persistent XSS. Recommendations For versions prior to 8.8.12 Patch 1, update to version 8.8.12 Patch 1 or later to resolve the issue...

PT-2020-11339

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to non-persistent XSS. Recommendations For versions 8.7.x through 8.8.11P2, at the moment, there is no information about a newer version that contains a fix...

CVE-2019-12427: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...

CVE-2019-8946: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

CVE-2019-8947: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...

CVE-2019-15313: Improper Neutralization of Input During Web Page Generation

In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...

CVE-2019-11318: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS...

CVE-2019-8945: Improper Neutralization of Input During Web Page Generation

Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS...

PT-2020-11337

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 8.7.x through 8.8.11P2 Description The issue is related to a persistent XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

CVE-2020-5223

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

Persistent XSS vulnerability in filename of attached file in PrivateBin

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

Cross site scripting

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

CVE-2020-5223

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

CVE-2020-5223

CVE-2020-5223 affects PrivateBin: 1.2.0 before 1.2.2 and 1.3.0 before 1.3.2. The root cause is an unescaped user-provided attachment filename that can inject HTML, enabling a persistent XSS when a paste is viewed (e.g., via cloning). The issue has been fixed in PrivateBin v1.3.2 and v1.2.2. Upgra...

CVE-2020-5223 Persistent XSS vulnerability in filename of attached file in PrivateBin

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

CVE-2020-5223: Improper Neutralization of Input During Web Page Generation

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting XSS vulnerability. The vulnerability has been fixed in PrivateBin...

WordPress Postie 1.9.40 Plugin - Persistent Cross-Site Scripting Exploit

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting Google Dork: inurl:/wp-content/plugins/postie/readme.txt Date: 2020-01-15 Exploit Author: V1n1v131r4 Vendor Homepage: https://postieplugin.com/ Software Link:...

Real Estate 7 < 2.9.5 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'Real Estate 7 WordPress', tested version — v2.9.4: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - Authenticated Persistent Self-XSS - IDOR - Information Exposure Edit WPScanTeam: January 12th - Report Received & Envato Contacted...