28 matches found
CVE-2018-5987
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...
CVE-2014-8622: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...
PT-2014-8651
Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 for WordPress Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter in the compfight-search.php file. This could...
CVE-2014-5202
Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...
CVE-2014-5202
Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...
PT-2014-6341
Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the search-value parameter in the compfight-search.php file...
CVE-2014-5202: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...