549 matches found
CVE-2019-6112
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...
Cross site scripting
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...
CVE-2019-6112
WordPress Sell Media plugin v2.4.1 contains a Cross-Site Scripting (XSS) vulnerability in /inc/class-search.php, exploitable via the keyword parameter (search_term) to inject arbitrary script/HTML. Several connected sources (nuclei template, PatchStack, WPVulnDB) confirm remote exploitation and u...
CVE-2019-6112
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...
CVE-2019-6112
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...
WordPress Sell Photo 1.0.5 Cross Site Scripting
Exploit Title: Sell Photo Wordpress Plugin v1.0.5 - Persistent Cross-Site Scripting Date: 2020-08-14 Vendor Homepage: https://noorsplugin.com/ Vendor Changelog: https://wordpress.org/plugins/sell-photo/developers Exploit Author: Melbin K Mathew @melbinkm Author Advisory:...
PT-2020-11192
Name of the Vulnerable Software and Affected Versions Sell Media plugin version 2.4.1 for WordPress Description A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the keyword parameter also known as $search term or the Search field in the...
CVE-2019-6112: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field...
Sell Media < 2.4.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field. https://example.com/sell-media-search/?keyword="alert/XSS/...
Sell Media < 2.4.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
A Cross-site scripting XSS vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter aka $searchterm or the Search field. PoC https://example.com/sell-media-search/?keyword="...
WordPress Sell Media plugin <= 2.4.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Metamorfosec in WordPress Sell Media plugin versions = 2.4.1. Solution Update the WordPress Sell Media plugin to the latest available version at least 2.4.2...
Feds indict Fxmsp hacker who breached anti-virus firms to sell data
By Sudais Asif The Fxmsp hacker is a Kazakhstani citizen who... This is a post from HackRead.com Read the original post: Feds indict Fxmsp hacker who breached anti-virus firms to sell data...
MKCB Number Error Vulnerability
MKCB is a digital currency as well as Ether. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of MKCB. An attacker can exploit this vulnerability by setting the sell price to a large value to execute arbitrary code on the system...
SingaporeCoinOrigin Digital Error Vulnerability
SingaporeCoinOrigin SCO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function in SCO's smart contract implementation. An attacker can exploit this vulnerability by setting the sell price to a large value to execute arbitrary code on the system...
GROWCHAIN Number Error Vulnerability
GROWCHAIN GROW is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'sell' function in GROW's smart contract implementation. A remote attacker could exploit this vulnerability to set a user's balance to an arbitrary value...
Logic Flaw Vulnerability in Internet Node Token
Internet Node Token TNT is an ethereum-based virtual currency. A security vulnerability exists in the 'sell' function in INT's smart contract implementation, which stems from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause a...
Gold Reward has a flawed logic vulnerability
Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...
DestiNeed has a flawed logic vulnerability
DestiNeed DSN is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in DSN's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...
ENTER has a logic flaw vulnerability
ENTER ENTR is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of ENTR's smart contract contract name: EnterToken implementation. An attacker could exploit this vulnerability to prevent the seller from accessing the assets due to the exchange...
Crowdnext has a flawed logic vulnerability
Crowdnext CNX is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of CNX's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...