Lucene search
+L

15 matches found

osv_cve
osv_cve
•added 2018/07/07 5:29 p.m.•23 views

CVE-2018-13423

admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...

6.1CVSS6AI score
SaveExploits0References2
NVD
NVD
•added 2018/07/07 5:29 p.m.•40 views

CVE-2018-13423

admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...

6.1CVSS6AI score0.00886EPSS
SaveExploits0References2
CVE
CVE
•added 2018/07/07 5:00 p.m.•60 views

CVE-2018-13423

Affected product: Omeka prior to 2.6.1. Vulnerability: Cross-site scripting (XSS) in admin/themes/default/items/tag-form.php triggered by adding or editing a tag. Root cause / nature: The description indicates an XSS flaw in the tag form handling. Impact (as stated): arbitrary script/HTML may be ...

6.1CVSS5.9AI score0.00886EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2018/07/07 5:00 p.m.•7 views

CVE-2018-13423

admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...

6.1CVSS0.00886EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/07/07 12:00 a.m.•5 views

PT-2018-11818

Name of the Vulnerable Software and Affected Versions Omeka versions prior to 2.6.1 Description The issue allows for XSS by adding or editing a tag, specifically in the admin/themes/default/items/tag-form.php file. Recommendations For Omeka versions prior to 2.6.1, update to version 2.6.1 or late...

6.1CVSS0.00886EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/07 12:00 a.m.•9 views

CVE-2018-13423: Improper Neutralization of Input During Web Page Generation

admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag...

6.1CVSS6.3AI score0.00886EPSS
SaveExploits0References2
Veracode
Veracode
•added 2017/10/03 5:44 a.m.•28 views

Open Redirect

WordPress is vulnerable to open redirect attacks. It is possible because the library does not properly validate the external URL in wphttpreferer in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, allowing attackers to redirect users to a different website...

5.4CVSS7.1AI score0.02187EPSS
SaveExploits0References7Affected Software2
osv_cve
osv_cve
•added 2017/09/23 8:29 p.m.•39 views

CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

5.4CVSS7AI score
SaveExploits0References6
Prion
Prion
•added 2017/09/23 8:29 p.m.•29 views

Open redirect

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

4.9CVSS5.6AI score0.02187EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2017/09/23 8:29 p.m.•43 views

CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

5.4CVSS6.8AI score0.02187EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2017/09/23 8:00 p.m.•74 views

CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

5.4CVSS3.2AI score0.02187EPSS
SaveExploits0
Mend
Mend
•added 2017/09/23 8:00 p.m.•5 views

CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

5.4CVSS0.02187EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2017/09/23 12:00 a.m.•5 views

PT-2017-13654

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.8.2 Description The issue allows for an open redirect attack. This is related to the files wp-admin/edit-tag-form.php and wp-admin/user-edit.php. Recommendations For versions prior to 4.8.2, update to version 4.8....

9.8CVSS0.06518EPSS
SaveExploits1References31
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/23 12:00 a.m.•8 views

CVE-2017-14725: URL Redirection to Untrusted Site

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php...

5.4CVSS7.1AI score0.02187EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2009/08/18 9:00 p.m.•45 views

CVE-2009-2853

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

10CVSS5.9AI score0.04711EPSS
SaveExploits3References1
Rows per page
Query Builder