Lucene search
+L

3273 matches found

CNVD
CNVD
added 2019/12/12 12:00 a.m.9 views

Arbitrary File Deletion Vulnerability in DSCMS Enterprise Content Management System

DSCMS is Changsha Deshaun network based on ThinkPHP5.0 framework development, using PHP + Mysql architecture, is a suitable for the construction of enterprise website cms station building system features a comprehensive SEO-friendly dual-language open source CMS system. DSCMS enterprise station...

7AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:00 a.m.10 views

WordPress all-in-one-seo-pack plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. all-in-one-seo-pack is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

5.4CVSS6.3AI score0.01532EPSS
SaveExploits1References1
NVD
NVD
added 2019/10/16 2:15 p.m.24 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4CVSS5.3AI score0.01532EPSS
SaveExploits1References6
OSV
OSV
added 2019/10/16 2:15 p.m.19 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4CVSS6.1AI score
SaveExploits0References6
Prion
Prion
added 2019/10/16 2:15 p.m.18 views

Cross site scripting

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

3.5CVSS5.3AI score0.01532EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2019/10/16 1:58 p.m.35 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4AI score0.01532EPSS
SaveExploits1References6
CVE
CVE
added 2019/10/16 1:58 p.m.163 views

CVE-2019-16520

The All-in-One SEO Pack WordPress plugin (before version 3.2.7) is vulnerable to Stored XSS due to improper encoding of the SEO-specific description for posts via unsafe placeholder replacement. Affected: WordPress plugin All in One SEO Pack

5.4CVSS5.2AI score0.01532EPSS
SaveExploits1References6Affected Software1
Openbugbounty
Openbugbounty
added 2019/09/28 12:51 a.m.6 views

seo-sys.de Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1914 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting seo-sys.de website and its users. Following coordinat...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/09/26 12:00 a.m.164 views

all-in-one-seo-pack 3.2.7 Cross Site Scripting

Exploit Title: all-in-one-seo-pack 3.2.7 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\all-in-one-seo-pack" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://semperplugins.com/all-in-one-seo-pack-pro-version Software Link:...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2019/09/25 12:00 a.m.13 views

WordPress DELUCKS SEO plugin <= 2.1.7 - Unauthenticated Options Update vulnerability

Unauthenticated Options Update vulnerability found in WordPress DELUCKS SEO plugin versions = 2.1.7. Solution This plugin has been closed as of September 22, 2019 and is not available for download. This closure is temporary, pending a full review...

3.4AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2019/09/21 12:00 a.m.7 views

DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update

This vulnerability was seen actively exploited in the wild on and around September 22nd 2019...

2.4AI score
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2019/09/11 9:30 a.m.56 views

How Can SEO Help Increase Website Security?

By Uzair Amir Though many think that SEO Search Engine Optimization and website security do not go hand in hand, they are a lot closer than many think. This is a post from HackRead.com Read the original post: How Can SEO Help Increase Website Security?...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2019/09/03 2:06 a.m.12 views

seo-impulse.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-954961 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting seo-impulse.ru website and...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/08/29 12:00 a.m.45 views

WordPress Rank Math SEO Plugin <= 1.0.27 Authentication Bypass Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rankmath:seo"; ifdescription...

6.5CVSS6.5AI score0.01381EPSS
SaveExploits2References3
CNVD
CNVD
added 2019/08/26 12:00 a.m.23 views

WordPress seo-redirection plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. seo-redirection is a redirection plugin used in it. A cross-site scripting vulnerability exists in the WordPress seo-redirection...

6.1CVSS6.2AI score0.01198EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/22 12:00 a.m.7 views

WordPress gregs-high-performance-seo plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gregs-high-performance-seo is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.01198EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/21 12:15 p.m.14 views

CVE-2016-10896

The seo-redirection plugin before 4.3 for WordPress has stored XSS...

6.1CVSS5.8AI score0.01198EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/21 12:15 p.m.20 views

Cross site scripting

The seo-redirection plugin before 4.3 for WordPress has stored XSS...

4.3CVSS6.9AI score0.01198EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/21 11:38 a.m.50 views

CVE-2016-10896

The CVE-2016-10896 entry concerns the WordPress plugin seo-redirection (pre-4.3) and describes a stored cross-site scripting (XSS) vulnerability. The vulnerability is tied to the seo-redirection plugin prior to version 4.3, with the impact resulting in stored XSS as stated in multiple linked sour...

6.1CVSS6.2AI score0.01198EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/21 11:38 a.m.29 views

CVE-2016-10896

The seo-redirection plugin before 4.3 for WordPress has stored XSS...

6.3AI score0.01198EPSS
SaveExploits0References1
Rows per page
Query Builder