2465 matches found
CVE-2018-5662
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
CVE-2018-5664
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php socialicon1 parameter...
CVE-2018-5657
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...
CVE-2018-5666
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bgcolor parameter...
Cross site request forgery (csrf)
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5658
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5665
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logoheight parameter...
CVE-2018-5657
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...
CVE-2018-5663
CVE-2018-5663 affects the WordPress plugin responsive-coming-soon-page v1.1.18. An XSS flaw exists in the wp-admin/admin.php button_text_link parameter, enabling injected scripts/HTML. Connected sources (NVD/CNVD/WPVulndb) describe an authenticated stored XSS scenario and related CSRF risk; some ...
CVE-2018-5665
The CVE-2018-5665 vulnerability affects the WordPress plugin “responsive-coming-soon-page” (version 1.1.18). The issue is a cross-site scripting (XSS) flaw that can be triggered via the wp-admin/admin.php logo_height parameter, enabling injection of arbitrary script/HTML. NVD reports CVSS 3.0 bas...
CVE-2018-5661
CVE-2018-5661 affects WordPress plugin responsive-coming-soon-page (v1.1.18). The vulnerability is an XSS via the logo_width parameter to wp-admin/admin.php, as described in NVD/CNVD entries. CVSS v3 base score 4.8 (Medium) with network attack vector, low attack complexity, privileges required: h...
CVE-2018-5661
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...
CVE-2018-5660
CVE-2018-5660 affects the WordPress plugin responsive-coming-soon-page (version 1.1.18). The vulnerability is an XSS in the admin context via the parameter coming-soon_sub_title in wp-admin/admin.php, as described by multiple sources (NVD/CNVD). Technical details across connected documents confir...
CVE-2018-5666
CVE-2018-5666 affects the WordPress plugin responsive-coming-soon-page (version 1.1.18). The vulnerability is an XSS flaw in the admin path via the parameter bg_color in wp-admin/admin.php, which can inject arbitrary script/HTML and impact admin context. Public sources in the connected set corrob...
WordPress tabs-responsive plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site. tabs-responsive plugin is used in which a tab to add plug-ins. A cross-site scripting vulnerability exists in...
CVE-2018-5312
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
Design/Logic Flaw
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
CVE-2018-5312
The CVE concerns the WordPress tabs-responsive plugin (version 1.8.0) with a reflected/stored XSS via the post_title parameter to wp-admin/post.php. The root cause is unvalidated/post_title handling in the tabs-responsive plugin, enabling script execution that can lead to user cookies exposure. D...