CVE-2016-10993

CVE-2016-10993 Wordpress 취약점 - XSS 크로스 사이트 스크립팅 취약점 위치 https://themesinfo.com/scoreme-wordpress-theme-design-496 개념 증명 PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 참고자료 https://wpscan.com/vulnerability/8431...

EUVD-2016-1984

Malware in sbrugna...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

WordPress ScoreMe theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ScoreMe theme is a theme plugin used to build sites with user ratings. A cross-site scripting vulnerability exists in WordPress ScoreMe...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

CVE-2016-10993 affects the WordPress ScoreMe theme (through 2016-04-01). The connected document provides concrete details: a reflected cross-site scripting (XSS) vulnerability via the s parameter, enabling an attacker to run arbitrary JavaScript in the victim’s browser. This can lead to session c...

PT-2019-7786

Name of the Vulnerable Software and Affected Versions ScoreMe theme versions prior to 2016-04-01 Description The issue allows for XSS via the s parameter. Recommendations For ScoreMe theme versions prior to 2016-04-01, update to a version released after 2016-04-01 to resolve the issue...

CVE-2016-10993: Improper Neutralization of Input During Web Page Generation

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

Wordpress Scoreme Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site.ScoreMe is a plugin for WordPress. A cross-site scripting vulnerability exists in Wordpress Scoreme Theme. A...

Wordpress Scoreme主题跨站漏洞

No description provided by source...

ScoreMe Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)

The scoreme WordPress theme was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress ScoreMe Theme - Cross Site Scripting

Because of this vulnerability in the "s" value of the "index.php" file, remote attackers are able to inject own malicious script codes to the client-side of the affected web-application. Solution Update the theme...

WordPress Scoreme Theme Cross Site Scripting

Document Title: =============== Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID:...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...