Cross site scripting

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

VulnCheck KEV: CVE-2021-24654

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the userregistrationprofilepicurl value when submitted directly via the userregistrationupdateprofiledetails AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attack...

CVE-2018-18540

TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL...

PT-2018-14502

Name of the Vulnerable Software and Affected Versions TeaKKi version 2.7 Description The issue allows for XSS attacks through a crafted onerror attribute for a picture's URL. Recommendations For TeaKKi version 2.7, consider validating and sanitizing user-inputted URLs for pictures to prevent...

Beehive Forum Cross-Site Scripting Vulnerability

Beehive Forum is a set of Web forum software based on PHP and MySQL. The software provides text filtering, user rights management and e-mail notification. A cross-site scripting vulnerability exists in the editprefs.php script in Beehive Forum version 1.4.4, which stems from the program's failure...