CVE-2013-6880: Improper Neutralization of Input During Web Page Generation

Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting XSS attacks via the HTTP Referer header...

CVE-2018-10727

Reflected Cross-Site Scripting XSS vulnerability in the fabrikreferrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header...

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in the fabrikreferrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header...

CVE-2018-10727: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in the fabrikreferrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header...

CVE-2015-9472

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

CVE-2015-9472

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

CVE-2012-6715

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

CVE-2012-6715

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

Default credentials

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

CVE-2012-6715

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

CVE-2012-6715

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

CVE-2012-6715: Improper Neutralization of Input During Web Page Generation

The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header...

PT-2019-6823

Name of the Vulnerable Software and Affected Versions formbuilder plugin versions prior to 0.9.1 for WordPress Description The issue concerns a cross-site scripting XSS vulnerability. It occurs via a Referer header. Recommendations For formbuilder plugin versions prior to 0.9.1, update to version...

CVE-2015-9314

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

Cross site request forgery (csrf)

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

CVE-2015-9314

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

CVE-2015-9314

The CVE-2015-9314 entry concerns the WordPress plugin NewStatPress, affected versions prior to 1.0.4. The vulnerability is an XSS issue tied to the Referer header, impacting the plugin’s handling of HTTP Referer data. Several connected sources corroborate the same flaw (XSS related to Referer hea...

CVE-2019-15062: Cross-Site Request Forgery (CSRF)

An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element containing a user/card.php CSRF request in his Linked Files settings page. When visited by the admin, this could completely take over the admin account. The protection mechanism for CSRF is to check the Referer...

CVE-2015-9314: Improper Neutralization of Input During Web Page Generation

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

PT-2019-7273

Name of the Vulnerable Software and Affected Versions newstatpress plugin versions prior to 1.0.4 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It is associated with the Referer header. Recommendations For versions prior to 1.0.4, update to version...