CVE-2024-11412: Improper Neutralization of Input During Web Page Generation

The Shine PDF Embeder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shinepdf' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

PT-2024-16970 · WordPress · Shine Pdf Embeder

Name of the Vulnerable Software and Affected Versions: Shine PDF Embeder plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'shinepdf' shortcode due to insufficient input sanitization and output escaping on...

shine-designch.com Improper Access Control vulnerability OBB-3810656

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shinemagnets.com Cross Site Scripting vulnerability OBB-3229502

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shineplastics.in Cross Site Scripting vulnerability OBB-2996704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shinefacilityservices.com Improper Access Control vulnerability OBB-2214893

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PHP Scripts Mall Naukri/Shine/Jobsite Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Naukri/Shine/Jobsite Clone Script is a set of PHP and MySQL based online recruitment and job search website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Naukri/Shine/Jobsite Clone Script version 3.0.4, which can be exploited b...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15185

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

CVE-2018-15185

Vulnerability summary (CVE-2018-15185) : PHP Scripts Mall Naukri/Shine/Jobsite Clone Script version 3.0.4 is affected. A remote attacker can trigger a denial of service (page update outage) by submitting crafted PHP and JavaScript code in the “Current Position” field. This is documented across mu...

CVE-2018-15185: Improper Input Validation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...

PT-2018-12932

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue allows remote attackers to cause a denial of service, specifically a page update outage, by injecting crafted PHP and JavaScript code into the Current...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15184

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

CVE-2018-15184

CVE-2018-15184 affects PHP Scripts Mall Naukri/Shine/Jobsite Clone Script, version 3.0.4. The vulnerability is a stored cross-site scripting (XSS) issue in the USERNAME field, as described in multiple sources (notably the CVE entry and CNVD/NVD records). The root cause is input handling that allo...

PT-2018-12931

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Naukri / Shine / Jobsite Clone Script version 3.0.4 Description The issue is related to Stored XSS via the USERNAME field. Recommendations For version 3.0.4, update to a newer version that contains a fix for this issue...

CVE-2018-15184: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...

shine-mall.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-560129 Description| Value ---|--- Affected Website:| shine-mall.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...