CityBook < 2.3.4 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'CityBook - Directory & Listing WordPress Theme', tested version — v2.3.3: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - IDOR Edit WPScanTeam: December 27h, 2019 - Envato Contacted January 6th, 2020 - Envato Investigating January...

Codoforum 4.8.3 - input_txt Persistent Cross-Site Scripting

Codoforum 4.8.3 - inputtxt Persistent Cross-Site Scripting Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-07 Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link:...

CVE-2013-5637

PQI AirCard has persistent XSS...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

Cross site scripting

PQI AirCard has persistent XSS...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

CVE-2013-5638

The CVE-2013-5638 entry concerns Transcend WiFiSD 1.8, where a persistent cross-site scripting (XSS) vulnerability exists in the web application. The root cause is described as lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code. ...

CVE-2013-5637

CVE-2013-5637 affects PQI AirCard with a persistent cross-site scripting (XSS) vulnerability. Multiple connected sources describe an XSS flaw arising from insufficient validation of client-side data, enabling attacker-controlled input to be reflected or stored in a web context. CVSS data indicate...

CVE-2013-5637

PQI AirCard has persistent XSS...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 is affected by multiple Persistent XSS (Cross‑Site Scripting) vulnerabilities, as documented by CVE-2020-5191. The cited sources consistently describe the issue as client-side script injections that could be executed in the context of the affected...

Exploit for Cross-site Scripting in Redmine

CVE-2019-17427 CVE-2019-17427 Persistent XSS POC In Redmine...

HomeAutomation 3.3.2 - Persistent Cross-Site Scripting

Exploit: HomeAutomation 3.3.2 - Persistent Cross-Site Scripting Date: 2019-12-30 Author: LiquidWorm Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Tested on: Apache/2.4.41 centos OpenSSL/1.0.2k-fips Advisory ID: ZSL-2019-5556 Advisor...

CVE-2019-19542

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page...

CVE-2019-19541

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page...

CVE-2019-19541

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page...

CVE-2019-19542

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page...

Cross site scripting

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page...

Cross site scripting

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page...