EUVD-2015-6855

Malware in sbrugna...

Wordpress sourceAFRICA Plugin Cross Site Scripting

漏洞涉及到的是：WordPress的一个插件sourceAFRICA，0.1.3版本上有XSS。插件主页：https://wordpress.org/plugins/sourceafrica/下载链接：https://downloads.wordpress.org/plugin/sourceafrica.zip其中的js/windows.php的第18/19行代码，直接使用当前url没有过滤。script src="?php echo $SITEURL;?wp-includes/js/tinymce/tinymcepopup.js"/script script src="?php ech...

CVE-2015-6920

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

CVE-2015-6920

CVE-2015-6920 applies to the WordPress plugin sourceAFRICA (version

CVE-2015-6920

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

CVE-2015-6920: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

PT-2015-7404

Name of the Vulnerable Software and Affected Versions sourceAFRICA plugin version 0.1.3 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter in the js/window.php file...

WordPress sourceAFRICA Plugin <= 0.1.3 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the wpbase parameter. Solution Update the plugin...

sourceAFRICA <= 0.1.3 - Unauthenticated Cross-Site Scripting (XSS)

The sourceafrica WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability...

WordPress sourceAFRICA 0.1.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link...

WordPress sourceAFRICA 0.1.3 Cross Site Scripting

Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link :...