7 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file...
CVE-2008-0837
Cross-site scripting XSS vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file...
CVE-2008-0837
CVE-2008-0837 is a cross-site scripting (XSS) vulnerability in the log feature of the WordPress plugin “Search Unleashed” (v0.2.10) by John Godley. The issue arises from improper handling of the s parameter, enabling an attacker to inject arbitrary script/HTML when an administrator views the log ...
WordPress Search Unleashed Plugin <= 0.2.10 - XSS
Because of this vulnerability in the log feature, the attackers can inject arbitrary web script or HTML via the "s" parameter. Solution Update the plugin...
CVE-2008-0837: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file...
Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin)
Hello all, There is a bug in "Log" function of Search Unleashed by John Godley, version 0.2.10. This plug-in stores search queries but does not validates stored data and put them back "raw" to browser. HTML and Java Script can be injected with search request:...
unleashed-xss.txt
Hello all, There is a bug in "Log" function of Search Unleashed by John Godley, version 0.2.10. This plug-in stores search queries but does not validates stored data and put them back "raw" to browser. HTML and Java Script can be injected with search request:...