361 matches found
CVE-2012-5346: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...
WordPress EvoLve Theme 1.2.5 - Cross-Site Scripting
's' Parameter WordPress EvoLve theme's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
CVE-2011-3863
Cross-site scripting XSS vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3860
Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3858
Cross-site scripting XSS vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3855
Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3852
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3850
Cross-site scripting XSS vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3860
Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
PT-2011-4732 · Unknown · Elegant Grunge Theme
Name of the Vulnerable Software and Affected Versions: Elegant Grunge theme versions prior to 1.0.4 Description: The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter...
PT-2011-4736 · Cover · Cover
Name of the Vulnerable Software and Affected Versions: Cover WP theme versions prior to 1.6.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...
CVE-2011-3856: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
PT-2011-4726 · WordPress · Atahualpa
Name of the Vulnerable Software and Affected Versions: Atahualpa theme versions prior to 3.6.8 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 3.6.8, update to version...
CVE-2011-3852: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3854: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3863: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3855: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2011-3860: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...