132 matches found
CVE-2026-115982
A cross-site scripting (XSS) vulnerability exists in phpIPAM versions up to 1.8.3 . The flaw is located in the create_rack_link function within the file app/tools/racks/show-rack-popup.php of the Rack Link Creation component. By manipulating the deviceid argument, an attacker can trigger the XSS....
CVE-2026-115982 phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function createracklink of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument deviceid results in cross site scripting. Remote exploitation o...
CVE-2026-115982 phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function createracklink of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument deviceid results in cross site scripting. Remote exploitation o...
phpIPAM cross-site scripting vulnerability
Versions 1.8.3 and earlier of phpIPAM contain a security vulnerability. This vulnerability stems from improper handling of the deviceid parameter in the createracklink function within the file app/tools/racks/show-rack-popup.php in the Rack Link Creation component, potentially leading to cross-si...
CVE-2012-20005
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
EUVD-2012-6613
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
CVE-2012-20005
The SocialFit plugin for WordPress (versions through 1.2.2) is vulnerable to a reflected cross-site scripting (XSS) flaw due to the lack of sanitization on the msg parameter. Unauthenticated attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php using service=googleplus and m...
CVE-2012-20005 SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
CVE-2012-20005 SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
WordPress SocialFit cross-site scripting vulnerability
WordPress SocialFit versions 1.2.2 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper handling of the unvalidated msg parameter in /wp-content/plugins/socialfit/popup.php, potentially enabling reflected cross-site scripting attacks. Unauthenticated attackers c...
PT-2026-118674
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
CVE-2012-20005: Improper Neutralization of Input During Web Page Generation
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
VulnCheck KEV: CVE-2012-20005
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...
CVE-2026-4335: Improper Neutralization of Input During Web Page Generation
The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment posttitle in all versions up to, and including, 6.4.3. This is due to insufficient output escaping in the getEditorPopup function and its corresponding media-popup.php template...
CVE-2018-12626
An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...
EUVD-2020-16605
Malware in sbrugna...
EUVD-2004-1531
Malware in sbrugna...
PT-2025-2070
Name of the Vulnerable Software and Affected Versions Elementor Addon Elements plugin for WordPress versions up to, and including, 1.13.10 Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, scheduled, and draft...
CVE-2024-13215: Exposure of Private Personal Information to an Unauthorized Actor
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level acce...