Cross site request forgery (csrf)

The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF...

supsystic.com XSS vulnerability

Vulnerable URL: https://supsystic.com/?s=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 160865 VIP website status:| No Coordinated...

WordPress Newsletter Supsystic Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Newsletter Supsystic, which stems from an error...

WordPress Newsletter Supsystic Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Newsletter Supsystic version 1.1.7 due to an error...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting Vulnerability

WordPress Newsletter Supsystic plugin version 1.1.7 suffers from a cross site scripting vulnerability. Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Product ...

Newsletter by Supsystic - Authenticated Stored XSS & CSRF

Despite what the original advisory states, the affected POST parameter is "label". The CSRF issue was fixed in version 1.1.8, however, the Plugin still did not validate or output encode the "label" parameter...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting

Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2070 Release Date: ============= 2017-05-16 Vulnerability Laboratory ID VL-ID:...

WordPress Popup By Supsystic 1.7.6 Cross Site Request Forgery

------------------------------------------------------------------------ Popup by Supsystic WordPress plugin vulnerable to Cross-Site Request Forgery ------------------------------------------------------------------------ Radjnies Bhansingh, July 2016...

Wordpress Popup By Supsystic plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in the Wordpress Popup By Supsystic plugin. Attackers can tric...

WordPress Popup by Supsystic 1.7.6 Plugin - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This vulnerablity allow...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery !-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This...

WordPress Plugin Popup by Supsystic 1.7.6 - Cross-Site Request Forgery

!-- Source: https://sumofpwn.nl/advisory/2016/popupbysupsysticwordpresspluginvulnerabletocrosssiterequestforgery.html Abstract A Cross-site Request Forgery vulnerablity exists in the Popup by Supsystic WordPress Plugin. This vulnerablity allows attackers to add and modify scripting code that will...

Popup by Supsystic <= 1.7.8 - Cross-Site Request Forgery (CSRF)

The Popup by Supsystic WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Photo Gallery by Supsystic plugin <= 1.8.5 - Cross Site Request Forgery (CSRF)

Because of this vulnerability, the attackers can add images to a gallery. Solution Update the plugin...

WordPress Photo Gallery 1.8.5 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Photo Gallery WordPress Plugin ------------------------------------------------------------------------ Umit Aksu, July 2016...

WordPress Photo Gallery 1.8.5 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery in Photo Gallery WordPress Plugin allows adding of images ------------------------------------------------------------------------ Umit Aksu, July 2016...

Photo Gallery by Supsystic <= 1.8.5 - Cross-Site Request Forgery (CSRF)

The Photo Gallery by Supsystic WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Photo Gallery by Supsystic plugin <= 1.8.5 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

Photo Gallery by Supsystic <= 1.8.5 - Authenticated Stored Cross-Site Scripting (XSS)

According to the researcher this issue can be exploited by leveraging Cross-Site Request Forgery CSRF...

WordPress Photo Gallery by Supsystic plugin <=1.2.5 - Unrestricted File Upload

WordPress Photo Gallery by Supsystic plugin unrestricted file upload vulnerability allows an access to upload functionality via "UploadHandler.php". Solution Update to version 1.2.6...