WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Config File Editor WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS vulnerability. By default, only administrator users could access the affected functionality, limiting the exploitability of the vulnerability. However, some WordPress admins may allow lesse...

CVE-2010-5093

MemberProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address ID of another user...

PT-2012-1336

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.6 Description The issue allows remote attackers to hijack user accounts by saving data using the email address ID of another user. This is due to a problem in the Member ProfileForm in security/Member.ph...