14 matches found
EUVD-2026-23342
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utmsource' parameter in all versions up to, and including, 14.16.4. This is due to insufficient input sanitization and output escaping. The plugin's referral parser copies the raw utmsource value into the...
CVE-2026-5231
The WP Statistics plugin for WordPress (affected: all versions up to 14.16.4) is vulnerable to Stored Cross-Site Scripting via the utm_source parameter. The root cause is insufficient input sanitization and output escaping: the referral parser copies the raw utm_source into the source_name field ...
EUVD-2014-8744
Malware in sbrugna...
EUVD-2013-3931
Malware in sbrugna...
Security Bulletin: Security Vulnerability affecting IBM Social Media Analytics Platform version 1.2
Abstract IBM Social Media Analytics Version 1.2 contains a reflective Cross-site scripting XSS vulnerability. CVE-2013-3999 Content VULNERABILITY DETAILS CVE-2013-3999: An attacker who is able to trick a user into clicking on a malicious link may be able to execute a script of their choosing. Thi...
Security Bulletin: Vulnerability in Apache Struts affects IBM Social Media Analytics (CVE-2017-5638)
Summary An Apache Struts vulnerability was addressed by IBM Social Media Analytics. Vulnerability Details CVEID: CVE-2017-5638 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by an error when performing a file upload based on Jakarta...
Security Bulletin: Vulnerability in Apache Struts affects IBM Social Media Analytics (CVE-2016-4003)
Summary An Apache Struts vulnerability was addressed by IBM Social Media Analytics 1.3.0 IF18. An upgrade to Apache Struts version 2.3.28.1 was performed. Vulnerability Details CVE-ID:CVE-2016-4003 Description: Apache Struts is vulnerable to cross-site scripting, caused by improper validation of...
Security Bulletin: Vulnerability in Apache Struts affects IBM Social Media Analytics (CVE-2016-0785)
Summary An Apache Struts vulnerability was addressed by IBM Social Media Analytics 1.3.0 IF18. Vulnerability Details CVEID: CVE-2016-0785 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by a double OGNL evaluation of attribute values. By...
Security Bulletin: Vulnerability in Open Source Dojo ToolKit affects IBM Social Media Analytics (CVE- 2015-5654)
Summary A Dojo ToolKit vulnerability affecting versions of Dojo prior to 1.2 was addressed by IBM Social Media Analytics. An upgrade to Dojo 1.8 was performed. Vulnerability Details CVEID: CVE-2015-5654 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation...
Security Bulletin: Vulnerability in Apache Commons affects IBM Social Media Analytics (CVE-2015-7450)
Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM Social Media Analytics. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, cause...
CVE-2014-8917
Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Social Media Analytics 1.2 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-3999
The CVE-2013-3999 issue affects IBM Social Media Analytics, version 1.2 prior to FP1. The vulnerability is a reflective XSS flaw that could allow an attacker to inject arbitrary script or HTML when a user is lured to click a malicious link. IBM’s bulletin confirms affected product/version and des...
