CVE-2019-15816

The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...

ClipperCMS Cross-Site Scripting Vulnerability

ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in the 'Site Name' field of the 'site' tag under configuration in ClipperCMS version 1.3.3. A remote attacker can exploit this vulnerability by sending a specially crafted site name to the...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5891

CVE-2017-5891 covers CSRF vulnerabilities in ASUS RT-AC* and RT-N* routers prior to firmware 3.0.0.4.380.7378, enabling login and settings changes via the router’s web interface from an attacker-controlled site. Affected models include RT-AC55U/56R/56S/56U/66U/66R/66W/66U family, RT-AC68K/R/U var...

CVE-2014-1603

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 param parameter to admin/load.php or 2 user, 3 email, or 4 name parameter in a Save Settings action to admin/settings.php...

CVE-2014-1603

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 param parameter to admin/load.php or 2 user, 3 email, or 4 name parameter in a Save Settings action to admin/settings.php...