96 matches found
Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
The plugin does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin. Go to Setting Tab Under Calendar Lite Plugin Under Setting tab Click on Slugs/Permalinks tab Enter the XSS payload into Main Slug and Category Slug both. Both fields are vulnerable...
Cross-Site Scripting (XSS)
WordPress is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via post slugs...
DEBIAN-CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
UBUNTU-CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038
CVE-2020-28038 affects WordPress prior to 5.5.2, where stored XSS via post slugs is possible. The connected Nessus/Fedora entries confirm WordPress 5.5.2/5.5.3 maintenance releases addressing CVE-2020-28038 and related fixes, with WordPress 5.5.2 patching the stored XSS in post slugs. The vulnera...
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs...
CVE-2020-28038: Improper Neutralization of Input During Web Page Generation
WordPress before 5.5.2 allows stored XSS via post slugs...
wordpress -- multiple issues
wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: -Props to Alex Concha of the WordPress Security Team for their work in...
WordPress <= 5.5.1 - Stored Cross-Site Scripting (XSS) in Post Slugs vulnerability
Stored Cross-Site Scripting XSS in Post Slugs vulnerability found by Karim El Ouerghemmi in WordPress versions = 5.5.1. Solution Update the WordPress to the latest version at least 5.5.2...
WordPress < 5.5.2 - Stored XSS in Post Slugs
Description The release notes state: "Thanks to Karim El Ouerghemmi from RIPS who disclosed a method to store XSS in post slugs."...
PT-2020-5778 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to insufficient protection measures for web page structures in the WordPress content management system. This can be exploited by a remote attacker to impact data integrity. T...