CVE-2011-3855: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3854: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2011-4733 · Unknown · Antisnews Theme

Name of the Vulnerable Software and Affected Versions: Antisnews theme versions prior to 1.10 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...

PT-2011-4730 · WordPress · Zenlite

Name of the Vulnerable Software and Affected Versions: ZenLite theme versions prior to 4.4 for WordPress Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable...

CVE-2011-3857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2011-4739 · WordPress · Readline

Name of the Vulnerable Software and Affected Versions: RedLine theme versions prior to 1.66 for WordPress Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to 1.66...

CVE-2011-3850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2011-4734 · Pixiv · Pixiv Custom Theme

Name of the Vulnerable Software and Affected Versions: Pixiv Custom theme versions prior to 2.1.6 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to...

PT-2011-4731 · Unknown · F8 Lite Theme

Name of the Vulnerable Software and Affected Versions: F8 Lite theme versions prior to 4.2.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later...

CVE-2009-4972: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php aka the log in page in SimpleID before 0.6.5 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2040

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-2040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2010-0691: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...

DEBIAN-CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3664: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. dot dot in the 1 p and 2 s parameters...