73 matches found
Cross site scripting
The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-1298
CVE-2022-1298 affects the WordPress Tabs plugin up to version 2.2.8. The vulnerability arises from failure to sanitize and escape Tab descriptions, enabling stored Cross-Site Scripting (XSS) by users with a role as low as editor, even when unfiltered_html is disallowed. The impact is stored XSS t...
WordPress plugin Tabs 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Tabs is vulnerable to a cross-site scripting vulnerability that stems from the Tabs...
WordPress Tabs plugin <= 2.2.7 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Fayçal CHENA in WordPress Tabs plugin versions = 2.2.7. Solution Update the WordPress Tabs plugin to the latest available version at least 2.2.8...
CVE-2021-36893
Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Responsive Tabs WordPress plugin = 4.0.5...
CVE-2022-0621
The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
WordPress Tabs plugin <= 3.5.4 - Unauthenticated Arbitrary Option Update
Unauthenticated Arbitrary Option Update discovered in WordPress Tabs plugin versions = 3.5.4. Solution Update the WordPress Tabs plugin to the latest available version at least 3.6.0...
Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update
The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options...
Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update
The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options. PoC...
Code injection
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter accesstoken, accesstokensecret, consumerkey, and consumersecret values by reading the dcwptwitter.php source code. This leads to Twitter account takeover...
WordPress Game-Tabs plugin 'n' Parameter Cross Site Scripting Vulnerability
WordPress Game-Tabs Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4531
The CVE-2014-4531 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Game-Tabs plugin versions 0.4.0 and earlier, exploitable via the n parameter in main_page.php. According to the provided data, affected software is the WordPress Game-Tabs plugin
